Is CVE-2021-41503 actively exploited?

No active exploitation of CVE-2021-41503 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2021-41503 be exploited remotely?

Partially. CVE-2021-41503 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2021-41503?

CVE-2021-41503 has a CVSS score of 8.0 (HIGH).

HOME VULNERABILITIESCVE-2021-41503

HIGH

CVE-2021-41503

CWE-287Published: September 24, 2021· Updated: Jun 17, 2026

8.0

CVSS v3.1

Official Description

DCS-5000L v1.05 and DCS-932L v2.17 and older are affecged by Incorrect Acess Control. The use of the basic authentication for the devices command interface allows attack vectors that may compromise the cameras configuration and allow malicious users on the LAN to access the device. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

NVD Source

Technical Analysis

CVE-2021-41503 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 8.0.

From a weakness classification perspective (CWE-287): Authentication bypass vulnerabilities allow attackers to access protected resources without valid credentials.