CVE-2017-8405

An issue was discovered on D-Link DCS-1130 and DCS-1100 devices. The binary rtspd in /sbin folder of the device handles all the rtsp connections received by the device. It seems that the binary loads at address 0x00012CF4 a flag called "Authenticate" that indicates whether a user should be authenticated or not before allowing access to the video feed. By default, the value for this flag is zero and can be set/unset using the HTTP interface and network settings tab as shown below. The device requires that a user logging to the HTTP management interface of the device to provide a valid username and password. However, the device does not enforce the same restriction by default on RTSP URL due to the checkbox unchecked by default, thereby allowing any attacker in possession of external IP address of the camera to view the live video feed. The severity of this attack is enlarged by the fact that there more than 100,000 D-Link devices out there.

• CWE-287

• http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.htmlThird Party Advisory, VDB Entry
• https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdfExploit, Third Party Advisory
• https://seclists.org/bugtraq/2019/Jun/8Mailing List, Third Party Advisory
• http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.htmlThird Party Advisory, VDB Entry
• https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdfExploit, Third Party Advisory
• https://seclists.org/bugtraq/2019/Jun/8Mailing List, Third Party Advisory

Published

Jul 2, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-8399PCRE2 before 10.30 has an out-of-bounds write caused by a st…
• CVE-2017-8400In SWFTools 0.9.2, an out-of-bounds write of heap data can o…
• CVE-2017-8401In SWFTools 0.9.2, an out-of-bounds read of heap data can oc…
• CVE-2017-8402PivotX 2.3.11 allows remote authenticated users to execute a…
• CVE-2017-8403360fly 4K cameras allow unauthenticated Wi-Fi password chang…
• CVE-2017-8404An issue was discovered on D-Link DCS-1130 devices. The devi…9.8
• CVE-2017-8406An issue was discovered on D-Link DCS-1130 devices. The devi…8.8
• CVE-2017-8407An issue was discovered on D-Link DCS-1130 devices. The devi…8.8
• CVE-2017-8408An issue was discovered on D-Link DCS-1130 devices. The devi…
• CVE-2017-8409An issue was discovered on D-Link DCS-1130 devices. The devi…7.5
• CVE-2017-8410An issue was discovered on D-Link DCS-1100 and DCS-1130 devi…9.8
• CVE-2017-8411An issue was discovered on D-Link DCS-1130 devices. The devi…8.8