I own a D-Link DCS-7110 HD POE network camera.

It features an apparently iptables based access list configuration where you can allow/disallow certain networks and addresses from accessing the camera.

I accidentally disabled access for everyone, thus can not acces it at all anymore. It boots, get's an ip-address from my dhcp and just sits there, shielded from the outside world.

I have already tried changing my dhcp server to provide an address from a different network, in the hope I had just disabled access for my own network, but it seems I disabled it for all networks. Good job.

Unfortunately the camera is installed about 10m over ground and I can not easily access it at all.

I have not found information about a known vulnerability in the network stack of the firmware, but I wonder if there would be one which could allow me to exploit to disable iptables and get access to it again.

I managed to extract the firmware binary, but have not spent much time analyzing it. It seems to use a Linux kernel 2.6.

Does anyone have an idea on how to proceed? Otherwise I should prepare myself to rent a cherry picker to be able to reach the camera and do a factory reset.

  • 6
    I think you're just gonna have to break out a ladder.
    – RoraΖ
    Aug 21 '17 at 13:21
  • As @RoraΖ stated, it will be really faster and more effective to just get the ladder up and access the camera physically.
    – Eda190
    Aug 21 '17 at 16:46
  • iptables is practically bullet proof at this point. It's such a small and low level bit of software that the attack surface is small and it filters everything before any of software can see it so even if the camera had a magic switch that you could throw a single packet at to disable the filtering you wouldn't be able to do anything.
    – Allison
    Aug 22 '17 at 4:57
  • Even if there is an extant networking vulnerability in the kernel version you are using (which there very well may be), actually writing a working exploit takes a lot of time and effort. You'll end up wanting to use a ladder, regardless of whether or not the networking stack is vulnerable.
    – forest
    Mar 24 '18 at 19:33

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.