{"schemaVersion":3,"id":"CVE-2017-8412","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device has a custom binary called mp4ts under the /var/www/video folder. It seems that this binary dumps the HTTP VERB in the system logs. As a part of doing that it retrieves the HTTP VERB sent by the user and uses a vulnerable sprintf function at address 0x0000C3D4 in the function sub_C210 to copy the value into a string and then into a log file. Since there is no bounds check being performed on the environment variable at address 0x0000C360 this results in a stack overflow and overwrites the PC register allowing an attacker to execute buffer overflow or even a command injection attack.","dates":{"published":"2019-07-02T20:08:17.000Z","modified":"2024-08-05T16:34:23.191Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.8,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5.8,"severity":"medium","vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.05732,"percentile":0.92971,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.05732},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.05732,"percentile":0.92971}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.05732,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.05732,"percentile":0.92971}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"dlink","product":"dcs-1100_firmware","name":"dcs-1100 firmware","label":"dcs-1100_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/dlink/dcs-1100"},{"vendor":"dlink","product":"dcs-1130_firmware","name":"dcs-1130 firmware","label":"dcs-1130_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/dlink/dcs-1130"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://seclists.org/bugtraq/2019/Jun/8","label":"seclists.org/bugtraq/2019/Jun/8","hostname":"seclists.org","tags":["Mailing List","X Refsource BUGTRAQ","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html","label":"packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html","hostname":"packetstormsecurity.com","tags":["X Refsource MISC","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf","label":"github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf","hostname":"github.com","tags":["X Refsource MISC","Not Applicable","Third Party Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2019-07-02T20:08:17.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-05T16:34:23.191Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":36,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T09:08:15.240Z","stale":false,"partial":false}}