An issue was discovered on D-Link DCS-1130 and DCS-1100 devices.
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-287.
Summary
An issue was discovered on D-Link DCS-1130 and DCS-1100 devices. The binary rtspd in /sbin folder of the device handles all the rtsp connections received by the device. It seems that the binary loads at address 0x00012CF4 a flag called "Authenticate" that indicates whether a user should be authenticated or not before allowing access to the video feed. By default, the value for this flag is zero and can be set/unset using the HTTP interface and network settings tab as shown below. The device requires that a user logging to the HTTP management interface of the device to provide a valid username and password. However, the device does not enforce the same restriction by default on RTSP URL due to the checkbox unchecked by default, thereby allowing any attacker in possession of external IP address of the camera to view the live video feed. The severity of this attack is enlarged by the fact that there more than 100,000 D-Link devices out there.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dlink:dcs-1100_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dcs-1100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dcs-1130_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dcs-1130:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
- cpe:2.3:o:dlink:dcs-1100_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dcs-1100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dcs-1130_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dcs-1130:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2017-8405
- 2026-10-03 Alias added: GHSA-fq2q-8mq9-5rfh
References
More D-Link Japan K.K. Dcs-1100 Firmware vulnerabilities
- TI-2013-01406 A Command Injection vulnerability exists in the /var/www/cgi-bin/rtpd.cgi script in… CVSS 3.1CRITICAL 9.8
- TI-2017-05971 An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. CVSS 3.1HIGH 8.8
- TI-2017-05968 An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. CVSS 3.1HIGH 8.8
- TI-2017-05965 An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. CVSS 3.1CRITICAL 9.8
- TI-2017-05970 An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. CVSS 3.1CRITICAL 9.8
- TI-2013-01409 An Information Disclosure vulnerability exists due to insufficient validation of… CVSS 3.1HIGH 7.5
Sources
- CVE-2017-8405 · CVE Program
- CVE-2017-8405 · NVD
- FIRST EPSS
- GHSA-fq2q-8mq9-5rfh · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences