CVE-2017-8405

CVE-2017-8405 affects D-Link DCS-1130 and DCS-1100 cameras. The rtspd binary loads an Authenticate flag (default 0) that governs access to the video feed. While HTTP management requires login, RTSP does not enforce authentication by default, because the corresponding checkbox is unchecked. This c...