CVE-2017-8417

CVE-2017-8417 describes an authentication bypass vulnerability in D-Link DCS-1100 and DCS-1130 devices, allowing unauthenticated access to device passwords. This critical flaw, with a CVSS score of 8.8 (High), enables an attacker on the local network to retrieve the device's password by sending a single UDP packet with custom base64 encoding. The attack requires no user interaction and has high confidentiality, integrity, and availability impacts. While no active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB) has been identified, and community discussion is minimal, the widespread deployment of affected D-Link devices presents a significant risk.