DCS-930LB Firmware Release Notes

Firmware: v2.17.03
Release Date: 2018-12-18
Applicable Hardware Version: B1 and B2
Mydlink Agent Version: v2.2.0-b33
ActiveX Version for Windows: v2.3.2.41

New Features & Specification Change:

1. Upgrade mydlink agent to v2.2.0-b33
2. Change the default system time to 2019-01-01
3. Block the webUI access in Safari 12.
4. Re-sign the ActiveX plugin with the new certificate. (Valid from 2018/6/22 to 2019/9/22)
5. Re-sign the Java Applet with the new certificate. (Valid from 2018/6/22 to 2019/9/22)

Improvement:
1. Don’t use GPL v3 open source (change open source used for e-mail function)

Bug Fixes:
1. Upgrade MatrixSSL to v3.9.3 that resolve the vulnerabilities in MatrixSSL.
2. Fixed a command injection issue in the change admin’s password configuration (/setSystemAdmin).
3. Fixed the issue where sending long password on password field of html page.
4. Fixed for WPA2 KRACK Vulnerabilities.
5. Update the ActiveX and Java Applet with renewed code-signing certificate.
6. Fixed an issue that when set motion sensitivity to 0%, the motion alarm still occurs.
7. Fixed the “wireless.htm buffer overflow” vulnerability.

Known Issue:
1. The device does not support Mozilla Firefox 52 or later.
2. The device does not support Google Chrome 42 or later.
3. The device does not support Apple Safari 12 or later.
4. The device does not support Microsoft Edge browser.
5. When zoom out the browser on Sound Detection webpage, the screen cannot zoom out too.
6. The Java Plug-In viewer can’t support Web Proxy Traversal.
7. High sensitivity for motion detection can easily trigger a false alarm.
8. There is no warning message display like as Windows OS when MAC OS did not install Java.
------------------------------END----------------------------------------------------------------------------------

D-Link Corporation confidential

Firmware: v2.16.01
Release Date: 2018-07-03
Applicable Hardware Version: B1 and B2
Mydlink Agent Version: v2.2.0-b03n
ActiveX Version for Windows: v2.3.2.41

New Features & Specification Change:

1. Upgrade mydlink agent to 2.2.0-b03n
2. Update ActiveX Plugin to v2.3.2.41
3. Re-sign the ActiveX plugin with the new certificate. (Valid from 2018/6/8 to 2019/6/9)
4. Re-sign the Java Applet with the new certificate. (Valid from 2018/6/8 to 2019/6/9)

Bug Fixes:
None

Known Issue:
1. This version had the WPA2 KRACK Security Vulnerability issue.
2. When zoom out the browser on Sound Detection webpage, the screen cannot zoom out too.
3. Then using Safari for Windows OS to view the camera image, you can’t get a smooth streaming
video.
4. The Java and Plug-In viewer can’t support Web Proxy Traversal.
5. The flicker noise would trigger the motion detection when sensitivity is 100%.
6. There is no warning message display like as Windows OS when MAC OS did not install Java.
7. You can’t view the IP Cam’s live image from Chrome 42 or later. This is because the camera is
configured to use a Java applet for viewing H.264 and Motion JPEG stream, but starting with
Chrome Version 42, Google has disabled the NPAPI based plugins like Java.
To re-enable Java plugin on Google Chrome 42 and alter, please follow these instructions:
I. Type chrome://flags in the browser's address bar and hit enter.
II. Search for chrome://flags/#enable-npapi on the page. Or, load it directly.
III. Enable it with a click on the link.
IV. Restart the browser.
All NPAPI plugins installed in Chrome become available again.
------------------------------END----------------------------------------------------------------------------------

Firmware: v2.15.06
Release Date: 2017-09-21
Applicable Hardware Version: B1 and B2
Mydlink Agent Version: v2.2.0-b03

D-Link Corporation confidential

ActiveX Version for Windows: v2.3.2.40

New Features & Specification Change:

5. Upgrade mydlink agent to 2.2.0-b03
6. Change the system default date to 2017/01/01
7. Update the ActiveX and Java Applet with renewed code-signing certificate (validity period of the
certificate is from 9/30/2016 to 10/1/2019).
8. Support digest authentication for Web UI

Bug Fixes:
1. Add XSS protection mechanism for CGI command
2. Fixes Cross Site Request Forgery (CSRF) vulnerability for FTP setting
3. Fixes denial of service (DoS) vulnerabilities for upload firmware and restoreconfiguration
4. Remove crossdomain.xml to fix a securityvulnerabilityissue.

Known Issue:
1. When zoom out the browser on Sound Detection webpage, the screen cannot zoom out too.
2. Then using Safari for Windows OS to view the camera image, you can’t get a smooth streaming
video.
3. The Java and Plug-In viewer can’t support Web Proxy Traversal.
4. The flicker noise would trigger the motion detection when sensitivity is 100%.
5. There is no warning message display like as Windows OS when MAC OS did not install Java.
6. You can’t view the IP Cam’s live image from Chrome 42 or later. This is because the camera is
configured to use a Java applet for viewing H.264 and Motion JPEG stream, but starting with
Chrome Version 42, Google has disabled the NPAPI based plugins like Java.
To re-enable Java plugin on Google Chrome 42 and alter, please follow these instructions:
V. Type chrome://flags in the browser's address bar and hit enter.
VI. Search for chrome://flags/#enable-npapi on the page. Or, load it directly.
VII. Enable it with a click on the link.
VIII. Restart the browser.
All NPAPI plugins installed in Chrome become available again.
------------------------------END----------------------------------------------------------------------------------

Firmware: v2.14.04
Release Date: 2016-09-09
Applicable Hardware Version: B1 and B2
Mydlink Agent Version: 2.1.0-b41
ActiveX Version for Windows: 2.3.2.39

D-Link Corporation confidential

New Features & Specification Change:
8. Upgrade mydlink agent to 2.1.0-b41.

Known Issue:
1. When zoom out the browser on Sound Detection webpage, the screen cannot zoom out too.
2. Then using Safari for Windows OS to view the camera image, you can’t get a smooth streaming
video.
3. The Java and Plug-In viewer can’t support Web Proxy Traversal.
4. The flicker noise would trigger the motion detection when sensitivity is 100%.
5. There is no warning message display like as Windows OS when MAC OS did not install Java.
6. You can’t view the IP Cam’s live image from Chrome 42 or later. This is because the camera is
configured to use a Java applet for viewing H.264 and Motion JPEG stream, but starting with
Chrome Version 42, Google has disabled the NPAPI based plugins like Java.
To re-enable Java plugin on Google Chrome 42 and alter, please follow these instructions:
IX. Type chrome://flags in the browser's address bar and hit enter.
X. Search for chrome://flags/#enable-npapi on the page. Or, load it directly.
XI. Enable it with a click on the link.
XII. Restart the browser.
All NPAPI plugins installed in Chrome become available again.
------------------------------END----------------------------------------------------------------------------------

Firmware: v2.14.03
Release Date: 2016-08-24
Applicable Hardware Version: B1 and B2
Mydlink Agent Version: v2.1.0-b37.
ActiveX Version for Windows: 2.3.2.39

New Features & Specification Change:

1. Upgrade mydlink agent to 2.1.0-b37.

Bug Fixes:
1. Fixed an issue that when Mydlink service will be offline when upgrade v2.13.15 firmware on your IP
Camera.

Known Issue:
1. When zoom out the browser on Sound Detection webpage, the screen cannot zoom out too.
2. Then using Safari for Windows OS to view the camera image, you can’t get a smooth streaming

D-Link Corporation confidential

 video.
3. The Java and Plug-In viewer can’t support Web Proxy Traversal.
4. The flicker noise would trigger the motion detection when sensitivity is 100%.
5. There is no warning message display like as Windows OS when MAC OS did not install Java.
6. You can’t view the IP Cam’s live image from Chrome 42 or later. This is because the camera is
configured to use a Java applet for viewing H.264 and Motion JPEG stream, but starting with
Chrome Version 42, Google has disabled the NPAPI based plugins like Java.
To re-enable Java plugin on Google Chrome 42 and alter, please follow these instructions:
XIII. Type chrome://flags in the browser's address bar and hit enter.
XIV. Search for chrome://flags/#enable-npapi on the page. Or, load it directly.
XV. Enable it with a click on the link.
XVI. Restart the browser.
All NPAPI plugins installed in Chrome become available again.
------------------------------END----------------------------------------------------------------------------------

Firmware: v2.13.15
Release Date: 2016-06-28
Applicable Hardware Version: B1 and B2
Mydlink Agent Version: v2.1.0-b27.
ActiveX Version for Windows: 2.3.2.39

New Features & Specification Change:

1. Upgrade mydlink agent to 2.1.0-b27.
2. Change the HTTPs self-signed certificate to SHA2 algorithms.
3. Support Mydlink UID mechanism (mdb get dev_uid)
4. Change the support page hyperlink of Firmware Upgrade web-UI to www.dlink.com.
5. Updated OpenSSL to v0.9.8o.
6. Remove mDNSResponder daemon on the unit.
7. Remove the Bonjour settings from the Network Setup web-UI.
8. Change the default system time to 2016-01-01
9. Update the years in the copyright statement for IP Camera’s web-UI to 2016.

Improvements:
1. Add authentication to CGI /config/stream_info.cgi.
2. Offer the password validation on console port. (Console’s Password is synchronized with the admin’s
password)

Bug Fixes:

D-Link Corporation confidential

1. Fixed CSRF vulnerability for the camera’s web-UI (Exclude CGI APIs).
2. Fixed the “RSA-CRT key leaks” vulnerability.
3. Fixed the “LANDAP stack overflow“ vulnerability. (discovered by search SEARCH-LAB)
4. Remove the “Arbitrary file upload interface” vulnerability. (discovered by search SEARCH-LAB).
5. Fixed an issue that Time zone setting for Minsk should be GMT+3.
6. Fixed a vulnerability - Authenticated Arbitrary File Upload with Root Privileges. (discovered by
IOActive Security)
7. Fixed a vulnerability - Authenticated Root OS Command Injection in File Upload. (discovered by
IOActive Security)
8. Fixed an XSS vulnerability - Stored XSS in User Name. (discovered by IOActive Security)
9. Fixed an XSS vulnerability - Reflected XSS in HTTP Host Header. (discovered by IOActive Security)

Known Issue:
1. When zoom out the browser on Sound Detection webpage, the screen cannot zoom out too.
2. Then using Safari for Windows OS to view the camera image, you can’t get a smooth streaming
video.
3. The Java and Plug-In viewer can’t support Web Proxy Traversal.
4. The flicker noise would trigger the motion detection when sensitivity is 100%.
5. There is no warning message display like as Windows OS when MAC OS did not install Java.
6. You can’t view the IP Cam’s live image from Chrome 42 or later. This is because the camera is
configured to use a Java applet for viewing H.264 and Motion JPEG stream, but starting with
Chrome Version 42, Google has disabled the NPAPI based plugins like Java.
To re-enable Java plugin on Google Chrome 42 and alter, please follow these instructions:
XVII. Type chrome://flags in the browser's address bar and hit enter.
XVIII. Search for chrome://flags/#enable-npapi on the page. Or, load it directly.
XIX. Enable it with a click on the link.
XX. Restart the browser.
All NPAPI plugins installed in Chrome become available again.
7. Due to modify the model name of UPnP properties for this release firmware, the current
D-ViewCAM version can’t search the device.
-------------------END--------------------------------------------------------------

Firmware: v2.12.01
APPLICABLE HARDWARE VERSION: B2
Date: 2015-10-01
Mydlink: v2.0.19-b54n

New Features & Specification Change:

D-Link Corporation confidential

1. Update mydlink agent to v2.0.19-b54n.

Bug Fixes:
1. The ActiveX and Java Applet signing certificate are updated.

Known Issue:
1. When zoom out the browser on Sound Detection webpage, the screen cannot zoom out too.
2. Then using Safari for Windows OS to view the camera image, you can’t get a smooth streaming
video.
3. The Java and Plug-In viewer can’t support Web Proxy Traversal.
4. The flicker noise would trigger the motion detection when sensitivity is 100%.
5. There is no warning message display like as Windows OS when MAC OS did not install Java.
6. You can’t view the IP Cam’s live image from Chrome 42 or later. This is because the camera is
configured to use a Java applet for viewing H.264 and Motion JPEG stream, but starting with
Chrome Version 42, Google has disabled the NPAPI based plugins like Java.
To re-enable Java plugin on Google Chrome 42 and alter, please follow these instructions:
XXI. Type chrome://flags in the browser's address bar and hit enter.
XXII. Search for chrome://flags/#enable-npapi on the page. Or, load it directly.
XXIII. Enable it with a click on the link.
XXIV. Restart the browser.
All NPAPI plugins installed in Chrome become available again.
7. Due to modify the model name of UPnP properties for this release firmware, the current
D-ViewCAM version can’t search the device.
-------------------END--------------------------------------------------------------

Firmware: v2.11.03
APPLICABLE HARDWARE VERSION: B1 and B2
Date: 2015-08-12
Mydlink: 2.0.19-b54

New Features & Specification Change:

1. Update mydlink agent to 2.0.19-b54.
2. Change WPS LED behavior blinking time on WPS error/timeout to 10 seconds.
3. Add Hardware Version item on the Status page of the camera’s web-GUI.
4. Change the model and model number of the UPnP properties.
5. Remove the reboot function at reset button. (For the previous firmware, you can press and hold
the reset button for less than 3 seconds to reboot the device)

D-Link Corporation confidential

Enhancements:
1. Add a warning webpage to prompt user that Windows 10/Edge is an un-supported browser.
2. Support the FTP function can auto-create FTP folder if the folder does not exist on FTP server
3. Add the de-noise mechanism to reduce the background noise

Bug Fixes:
1. Fixes the Internet Explorer 11 compatibility issue in Windows 10 (can’t get ActiveX install prompt).
2. Fixes the issue that if add an existing user account, the web-GUI doesn’t pop-up warning.
3. Add mechanism to prevent anti-brute force attack

Known Issue:
1. When zoom out the browser on Sound Detection webpage, the screen cannot zoom out too.
2. Then using Safari for Windows OS to view the camera image, you can’t get a smooth streaming
video.
3. The Java and Plug-In viewer can’t support Web Proxy Traversal.
4. The flicker noise would trigger the motion detection when sensitivity is 100%.
5. There is no warning message display like as Windows OS when MAC OS did not install Java.
6. You can’t view the IP Cam’s live image from Chrome 42 or later. This is because the camera is
configured to use a Java applet for viewing H.264 and Motion JPEG stream, but starting with
Chrome Version 42, Google has disabled the NPAPI based plugins like Java.
To re-enable Java plugin on Google Chrome 42 and alter, please follow these instructions:
XXV. Type chrome://flags in the browser's address bar and hit enter.
XXVI. Search for chrome://flags/#enable-npapi on the page. Or, load it directly.
XXVII. Enable it with a click on the link.
XXVIII. Restart the browser.
All NPAPI plugins installed in Chrome become available again.
7. Due to modify the model name of UPnP properties for this release firmware, the current
D-ViewCAM version can’t search the device.

-------------------END--------------------------------------------------------------

Firmware: v2.10.04
Hardware: B1
Date: 2015-06-02
Mydlink: 2.0.19-b35

New Features & Specification Change:

None

D-Link Corporation confidential

Enhancements:
None

Bug Fixes:
1. Remove one Hidden webUIfor RD develop using.

Known Issue:
1. When zoom out the browser on Sound Detection webpage, the screen cannot zoom out too.
2. Then using Safari for Windows OS to view the camera image, you can’t get a smooth streaming
video.
3. The Java and Plug-In viewer can’t support Web Proxy Traversal.
4. The flicker noise would trigger the motion detection when sensitivity is 100%.
5. There is no warning message display like as Windows OS when MAC OS did not install Java.
6. You can’t view the IP Cam’s live image from Chrome 42 or later. This is because the camera is
configured to use a Java applet for viewing H.264 and Motion JPEG stream, but starting with
Chrome Version 42, Google has disabled the NPAPI based plugins like Java.
To re-enable Java plugin on Google Chrome 42 and alter, please follow these instructions:
XXIX. Type chrome://flags in the browser's address bar and hit enter.
XXX. Search for chrome://flags/#enable-npapi on the page. Or, load it directly.
XXXI. Enable it with a click on the link.
XXXII. Restart the browser.
All NPAPI plugins installed in Chrome become available again.
--------------------------------END-------------------------------------------------
Firmware: v2.10.03
Hardware: B1
Date: 2015-05-14
Mydlink: 2.0.19-b35

New Features & Specification Change:

1. Update mydlink agent to v2.0.19-b35.
2. Support auto image setting switching mechanism for two different camera lens sources.

Enhancements:
None

Bug Fixes:
1. Fixed HTTPS issue that cause Pan/Tilt and Day/Night control not work from portal/app.

D-Link Corporation confidential

2. Fixes the issue in which IP Cam cannot create FTP folder with FTP server on Netgear R7000 Router.
3. Fixed CGI /reset.cgi reboot command not work issue.
4. Modify Time Zone Table list to support some existing time zones changes.

Known Issue:
1. When zoom out the browser on Sound Detection webpage, the screen cannot zoom out too.
2. Then using Safari for Windows OS to view the camera image, you can’t get a smooth streaming
video.
3. The Java and Plug-In viewer can’t support Web Proxy Traversal.
4. The flicker noise would trigger the motion detection when sensitivity is 100%.
5. There is no warning message display like as Windows OS when MAC OS did not install Java.
6. You can’t view the IP Cam’s live image from Chrome 42 or later. This is because the camera is
configured to use a Java applet for viewing H.264 and Motion JPEG stream, but starting with
Chrome Version 42, Google has disabled the NPAPI based plugins like Java.
To re-enable Java plugin on Google Chrome 42 and alter, please follow these instructions:
XXXIII. Type chrome://flags in the browser's address bar and hit enter.
XXXIV. Search for chrome://flags/#enable-npapi on the page. Or, load it directly.
XXXV. Enable it with a click on the link.
XXXVI. Restart the browser.
All NPAPI plugins installed in Chrome become available again.
--------------------------------END-------------------------------------------------

Firmware: v2.01.03
Hardware: B1
Date: 2015-02-03
Mydlink: 2.0.18-b61

Resolved Issues:
1. Fixed a problem which some functions can’t work properly on Mydlink Portal/Live Video tab via the
relay connection.

Known Issue:
1. When zoom out the browser on Sound Detection webpage, the screen cannot zoom out too.
2. Then using Safari for Windows OS to view the camera image, you can’t get a smooth streaming
video.
3. The Java and Plug-In viewer can’t support Web Proxy Traversal.
4. The flicker noise would trigger the motion detection when sensitivity is 100%.
5. There is no warning message display like as Windows OS when MAC OS did not install Java.

D-Link Corporation confidential

-----------------------END----------------------------------------------------------
Firmware: v2.01.02
Hardware: B1
Date: 2015-01-30
Mydlink: 2.0.18-b61

New Features & Specification Change:

1. Upgrade mydlink agent to v2.0.18-b61
2. Remove SSL, change to support TLS.

Known Issue:
1. When zoom out the browser on Sound Detection webpage, the screen cannot zoom out too.
2. Then using Safari for Windows OS to view the camera image, you can’t get a smooth streaming
video.
3. The Java and Plug-In viewer can’t support Web Proxy Traversal.
4. The flicker noise would trigger the motion detection when sensitivity is 100%.
5. There is no warning message display like as Windows OS when MAC OS did not install Java.
-----------------------END----------------------------------------------------------
Firmware: v2.00-b6
Hardware: B1
Release Date: (2014-05-27)
Mydlink Agent: 2.0.17-b70

Initial release.

Known Issue:
1. When zoom out the browser on Sound Detection webpage, the screen cannot zoom out too.
2. Then using Safari for Windows OS to view the camera image, you can’t get a smooth streaming
video.
3. The Java and Plug-In viewer can’t support Web Proxy Traversal.
4. The flicker noise would trigger the motion detection when sensitivity is 100%.
5. There is no warning message display like as Windows OS when MAC OS did not install Java.
-----------------------END----------------------------------------------------------

D-Link Corporation confidential