CVE-2017-8408

CVE-2017-8408 is a critical command injection vulnerability affecting D-Link DCS-1130 IP cameras. An unauthenticated attacker can exploit a flaw in the device's handling of GET parameters related to SMB folder settings, specifically the "user" parameter, to execute arbitrary commands on the device. This vulnerability carries a CVSS score of 9.8, indicating a high potential for complete compromise of confidentiality, integrity, and availability, with low attack complexity and no user interaction required. While no public exploits or active exploitation have been identified, and community discussion is minimal, the high FAUCET Risk Score suggests a significant threat.