CVE-2017-8405: An issue was discovered on D-Link DCS-1130 and DCS-1100 devices.

Security readout for executives and security teams

This CVE describes D-Link DCS-1130 and DCS-1100 cameras exposing live video over RTSP without authentication by default. If reachable from the internet, anyone who knows the camera’s external address may view the feed. The main business risk is privacy, surveillance, and regulatory exposure. Exposure is most likely where affected D-Link DCS-1130 or DCS-1100 cameras have RTSP reachable from external networks. Internal-only cameras still present risk to anyone with network access. The bundle claims broad D-Link device prevalence but does not prove exposed counts for these exact models. Treat internet-facing affected cameras as urgent because the impact is direct unauthorized viewing, not just a technical defect. Prioritize locations with sensitive spaces, customer data exposure, regulated environments, or externally reachable camera networks. Mitigation focus: Enable RTSP authentication in camera network settings where available.; Remove affected cameras from direct internet exposure.; Restrict RTSP access to trusted networks or VPN users only..

Prepared

Jun 6, 2026, 20:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.