D-Link devices that enable remote access to surveillance camera feeds contain critical vulnerabilities. Security vendor Qualys has found remote authentication bypass, information disclosure, denial of service and other flaws in the devices. The vulnerabilities were discovered by a security researcher at the BSides security conference in Las Vegas. The devices can hold two 4TB hard drives that can be used to store high-quality audio and video recordings from four cameras for up to six weeks, the researcher says. The company says it has not been contacted or received any information regarding the potential existence of this issue.”]

