What’s Vulnerable › Vulnerabilities

CVE-2017-11563

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-08-24 · updated 2026-06-17
• Weakness: CWE-119

Description

D-Link EyeOn Baby Monitor (DCS-825L) 1.08.1 has a remote code execution vulnerability. A UDP "Discover" service, which provides multiple functions such as changing the passwords and getting basic information, was installed on the device. A remote attacker can send a crafted UDP request to finderd to perform stack overflow and execute arbitrary code with root privilege on the device.

Affected products

• Dlink Eyeon Baby Monitor Firmware: 1.08.1

References

• http://seclists.org/fulldisclosure/2018/Aug/18
• https://documents.trendmicro.com/assets/tech_brief_Device_Vulnerabilities_in_the_Connected_Home2.pdf
• http://seclists.org/fulldisclosure/2018/Aug/18
• https://documents.trendmicro.com/assets/tech_brief_Device_Vulnerabilities_in_the_Connected_Home2.pdf

Get alerted when CVE-2017-11563 or the next vulnerability affects your stack