CVE-2017-11563

D-Link EyeOn Baby Monitor (DCS-825L) 1.08.1 has a remote code execution vulnerability. A UDP "Discover" service, which provides multiple functions such as changing the passwords and getting basic information, was installed on the device. A remote attacker can send a crafted UDP request to finderd to perform stack overflow and execute arbitrary code with root privilege on the device.

• CWE-119

• http://seclists.org/fulldisclosure/2018/Aug/18Mailing List, Third Party Advisory
• https://documents.trendmicro.com/assets/tech_brief_Device_Vulnerabilities_in_the_Connected_Home2.pdfTechnical Description, Third Party Advisory
• http://seclists.org/fulldisclosure/2018/Aug/18Mailing List, Third Party Advisory
• https://documents.trendmicro.com/assets/tech_brief_Device_Vulnerabilities_in_the_Connected_Home2.pdfTechnical Description, Third Party Advisory

Published

Aug 24, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-11557An issue was discovered in ZOHO ManageEngine Applications Ma…
• CVE-2017-11559An issue was discovered in ZOHO ManageEngine OpManager 12.2.…
• CVE-2017-1156IBM WebSphere Portal 8.5 and 9.0 could allow a remote attack…
• CVE-2017-11560An issue was discovered in ZOHO ManageEngine OpManager 12.2.…
• CVE-2017-11561An issue was discovered in ZOHO ManageEngine OpManager 12.2.…
• CVE-2017-11562A Session Fixation Vulnerability exists in the MT4 Networks …
• CVE-2017-11564The D-Link EyeOn Baby Monitor (DCS-825L) 1.08.1 has multiple…
• CVE-2017-11565debian/tor.init in the Debian tor_0.2.9.11-1~deb9u1 package …
• CVE-2017-11566AppUse 4.0 allows shell command injection via a proxy field.7.8
• CVE-2017-11567Cross-site request forgery (CSRF) vulnerability in Mongoose …
• CVE-2017-11568FontForge 20161012 is vulnerable to a heap-based buffer over…
• CVE-2017-11569FontForge 20161012 is vulnerable to a heap-based buffer over…