CVE-2017-9765

CVE-2017-9765, also known as "Devil's Ivy," is an integer overflow vulnerability in the Genivia gSOAP library (versions 2.7.x and 2.8.x before 2.8.48), affecting devices like Axis cameras and potentially millions of other IoT devices. This high-severity vulnerability (CVSS 8.1) allows remote attackers to execute arbitrary code or cause a denial of service via a large XML document, though a high attack complexity is noted due to potential web server blocking. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community attention and media coverage, indicating a recognized threat.