CVE-2017-8405
First published: Tue Jul 02 2019(Updated: )
An issue was discovered on D-Link DCS-1130 and DCS-1100 devices. The binary rtspd in /sbin folder of the device handles all the rtsp connections received by the device. It seems that the binary loads at address 0x00012CF4 a flag called "Authenticate" that indicates whether a user should be authenticated or not before allowing access to the video feed. By default, the value for this flag is zero and can be set/unset using the HTTP interface and network settings tab as shown below. The device requires that a user logging to the HTTP management interface of the device to provide a valid username and password. However, the device does not enforce the same restriction by default on RTSP URL due to the checkbox unchecked by default, thereby allowing any attacker in possession of external IP address of the camera to view the live video feed. The severity of this attack is enlarged by the fact that there more than 100,000 D-Link devices out there.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dlink Dcs-1100 Firmware | ||
| Dlink Dcs-1100 | ||
| Dlink Dcs-1130 Firmware | ||
| Dlink Dcs-1130 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2017-8405?
CVE-2017-8405 is a vulnerability found in D-Link DCS-1130 and DCS-1100 devices that allows for command injection, CSRF, and stack overflow.
How does CVE-2017-8405 affect D-Link DCS-1100 devices?
D-Link DCS-1100 devices running vulnerable firmware are affected by CVE-2017-8405.
How does CVE-2017-8405 affect D-Link DCS-1130 devices?
D-Link DCS-1130 devices running vulnerable firmware are affected by CVE-2017-8405.
What is the severity level of CVE-2017-8405?
CVE-2017-8405 has a severity level of 7.5 (high).
How can I fix CVE-2017-8405?
To fix CVE-2017-8405, update the firmware of the D-Link DCS-1100 and DCS-1130 devices to a non-vulnerable version.
- collector/nvd-index
- agent/severity
- agent/references
- agent/author
- agent/event
- agent/weakness
- agent/type
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/dlink
- canonical/dlink dcs-1100 firmware
- canonical/dlink dcs-1100
- canonical/dlink dcs-1130 firmware
- canonical/dlink dcs-1130