Vulnerability Details CVE-2017-11563
D-Link EyeOn Baby Monitor (DCS-825L) 1.08.1 has a remote code execution vulnerability. A UDP "Discover" service, which provides multiple functions such as changing the passwords and getting basic information, was installed on the device. A remote attacker can send a crafted UDP request to finderd to perform stack overflow and execute arbitrary code with root privilege on the device.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.157
EPSS Ranking 94.4%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
References
Products affected by CVE-2017-11563
-
cpe:2.3:h:dlink:eyeon_baby_monitor:-
-
cpe:2.3:o:dlink:eyeon_baby_monitor_firmware:1.08.1