CVE-2017-8410

CVE-2017-8410 is a critical buffer overflow vulnerability affecting D-Link DCS-1100 and DCS-1130 IP cameras. The vulnerability stems from improper handling of the "Authorization: Basic" header in RTSP connections, where the rtspd binary performs an unchecked memcpy operation, leading to stack corruption. This allows an unauthenticated attacker to achieve arbitrary code execution on the device by overflowing a buffer and controlling the program counter. With a CVSS score of 9.8 (CRITICAL), the attack requires no user interaction and can be executed remotely over the network with low complexity. Despite its severity, there is no public exploit code available, nor is there evidence of active exploitation or significant community discussion surrounding this vulnerability.