{"metadata": {"vulnerability": "CVE-2017-8409", "count": 29, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 23}, "linked_omitted": 0}, "data": [{"timestamp": "2017-05-02T00:00:00Z", "date_only": false, "value": "2017-05-02T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2017-8409", "field": "cveMetadata.dateReserved"}, {"timestamp": "2019-06-07T00:00:00Z", "date_only": false, "value": "2019-06-07T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2017-8409", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2019-06-07T15:06:02Z", "date_only": false, "value": "2019-06-07T15:06:02", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201907-1069", "record": "VAR-201907-1069", "field": "sources_release_date.data.4.date", "linked_record": true}, {"timestamp": "2019-07-02T00:00:00Z", "date_only": false, "value": "2019-07-02T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201907-1069", "record": "VAR-201907-1069", "field": "sources_release_date.data.1.date", "linked_record": true}, {"timestamp": "2019-07-02T19:09:08Z", "date_only": false, "value": "2019-07-02T19:09:08.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2017-8409", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2019-07-02T19:10:44Z", "date_only": false, "value": "2019-07-02T19:10:44.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2017-8409", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2019-07-02T20:15:00Z", "date_only": false, "value": "2019-07-02T20:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4QJ7-J8H7-R8G6", "record": "GHSA-4QJ7-J8H7-R8G6", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2019-07-02T20:15:00Z", "date_only": false, "value": "2019-07-02T20:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2017-8409", "record": "GSD-2017-8409", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2019-07-02T20:15:11.043Z", "date_only": false, "value": "2019-07-02T20:15:11.043000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201907-1069", "record": "VAR-201907-1069", "field": "sources_release_date.data.5.date", "linked_record": true}, {"timestamp": "2019-07-02T20:15:11.043Z", "date_only": false, "value": "2019-07-02T20:15:11.043", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-8409", "record": "FKIE_CVE-2017-8409", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2019-07-03T00:29:28Z", "date_only": false, "value": "2019-07-03T00:29:28.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/5313", "record": "CVE-2017-8409", "field": "creation_timestamp", "uuid": "213295aa-4fbe-4d68-b483-3c0c594983ee", "content": "ATENTION\u203c New - CVE-2017-8409\n\nAn issue was discovered on D-Link DCS-1130 devices. The device requires that a user logging to the device to provide a username and password. However, the device does not enforce the same restriction on a specific URL thereby allowing any attacker in possession of that to view the live video feed. The severity of this attack is enlarged by the fact that there more than 100,000 D-Link devices out there.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/5313", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2019-07-05T00:00:00Z", "date_only": true, "value": "2019-07-05", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2019-23339", "record": "CNVD-2019-23339", "field": "submitTime", "linked_record": true}, {"timestamp": "2019-07-09T00:00:00Z", "date_only": false, "value": "2019-07-09T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201907-1069", "record": "VAR-201907-1069", "field": "sources_update_date.data.1.date", "linked_record": true}, {"timestamp": "2019-07-09T20:35:48Z", "date_only": false, "value": "2019-07-09T20:35:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/5423", "record": "CVE-2017-8409", "field": "creation_timestamp", "uuid": "81ac2d87-50d6-4a4b-8c5b-2ff40bc59f6e", "content": "ATENTION\u203c New - CVE-2017-8409 (dcs-1130_firmware)\n\nAn issue was discovered on D-Link DCS-1130 devices. The device requires that a user logging to the device to provide a username and password. However, the device does not enforce the same restriction on a specific URL thereby allowing any attacker in possession of that to view the live video feed. The severity of this attack is enlarged by the fact that there more than 100,000 D-Link devices out there.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/5423"}, {"timestamp": "2019-07-10T00:00:00Z", "date_only": false, "value": "2019-07-10T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201907-1069", "record": "VAR-201907-1069", "field": "sources_update_date.data.3.date", "linked_record": true}, {"timestamp": "2019-07-18T00:00:00Z", "date_only": false, "value": "2019-07-18T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201907-1069", "record": "VAR-201907-1069", "field": "sources_release_date.data.0.date", "linked_record": true}, {"timestamp": "2019-07-18T00:00:00Z", "date_only": true, "value": "2019-07-18", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2019-23339", "record": "CNVD-2019-23339", "field": "openTime", "linked_record": true}, {"timestamp": "2019-07-19T00:00:00Z", "date_only": false, "value": "2019-07-19T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201907-1069", "record": "VAR-201907-1069", "field": "sources_update_date.data.0.date", "linked_record": true}, {"timestamp": "2021-04-23T00:00:00Z", "date_only": false, "value": "2021-04-23T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201907-1069", "record": "VAR-201907-1069", "field": "sources_update_date.data.2.date", "linked_record": true}, {"timestamp": "2021-04-23T18:51:00Z", "date_only": false, "value": "2021-04-23T18:51Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2017-8409", "record": "GSD-2017-8409", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2021-04-23T18:51:06.427Z", "date_only": false, "value": "2021-04-23T18:51:06.427000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201907-1069", "record": "VAR-201907-1069", "field": "sources_update_date.data.4.date", "linked_record": true}, {"timestamp": "2021-04-25T00:00:00Z", "date_only": false, "value": "2021-04-25T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201907-1069", "record": "VAR-201907-1069", "field": "sources_update_date.data.5.date", "linked_record": true}, {"timestamp": "2022-05-24T16:49:13Z", "date_only": false, "value": "2022-05-24T16:49:13Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4QJ7-J8H7-R8G6", "record": "GHSA-4QJ7-J8H7-R8G6", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-05-24T16:49:13Z", "date_only": false, "value": "2022-05-24T16:49:13Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4QJ7-J8H7-R8G6", "record": "GHSA-4QJ7-J8H7-R8G6", "field": "modified", "linked_record": true}, {"timestamp": "2023-12-13T01:21:08.576Z", "date_only": false, "value": "2023-12-13T01:21:08.576286Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2017-8409", "record": "GSD-2017-8409", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2023-12-18T12:17:49.981Z", "date_only": false, "value": "2023-12-18T12:17:49.981000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-201907-1069", "record": "VAR-201907-1069", "field": "last_update_date", "linked_record": true}, {"timestamp": "2024-08-05T16:34:22.839Z", "date_only": false, "value": "2024-08-05T16:34:22.839Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2017-8409", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-05T16:34:22.839Z", "date_only": false, "value": "2024-08-05T16:34:22.839Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2017-8409", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T01:26:20.387Z", "date_only": false, "value": "2026-06-17T01:26:20.387", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-8409", "record": "FKIE_CVE-2017-8409", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-12T17:16:27.910Z", "anchors": {"origin": {"timestamp": "2019-06-07T00:00:00Z", "date_only": false, "value": "2019-06-07T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2017-8409", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2019-06-07T00:00:00Z", "date_only": false, "value": "2019-06-07T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2017-8409", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": {"timestamp": "2019-07-03T00:29:28Z", "date_only": false, "value": "2019-07-03T00:29:28.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/5313", "record": "CVE-2017-8409", "field": "creation_timestamp", "uuid": "213295aa-4fbe-4d68-b483-3c0c594983ee", "content": "ATENTION\u203c New - CVE-2017-8409\n\nAn issue was discovered on D-Link DCS-1130 devices. The device requires that a user logging to the device to provide a username and password. However, the device does not enforce the same restriction on a specific URL thereby allowing any attacker in possession of that to view the live video feed. The severity of this attack is enlarged by the fact that there more than 100,000 D-Link devices out there.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/5313", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 2248168.0, "hours": 624.4911111111111, "days": 26.020462962962963, "min_seconds": 2161768.0, "max_seconds": 2248168.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-06-07T00:00:00Z", "date_only": false, "value": "2019-06-07T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2017-8409", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2019-07-03T00:29:28Z", "date_only": false, "value": "2019-07-03T00:29:28.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/5313", "record": "CVE-2017-8409", "field": "creation_timestamp", "uuid": "213295aa-4fbe-4d68-b483-3c0c594983ee", "content": "ATENTION\u203c New - CVE-2017-8409\n\nAn issue was discovered on D-Link DCS-1130 devices. The device requires that a user logging to the device to provide a username and password. However, the device does not enforce the same restriction on a specific URL thereby allowing any attacker in possession of that to view the live video feed. The severity of this attack is enlarged by the fact that there more than 100,000 D-Link devices out there.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/5313", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit": {"available": true, "seconds": 2248168.0, "hours": 624.4911111111111, "days": 26.020462962962963, "min_seconds": 2161768.0, "max_seconds": 2248168.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-06-07T00:00:00Z", "date_only": false, "value": "2019-06-07T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2017-8409", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2019-07-03T00:29:28Z", "date_only": false, "value": "2019-07-03T00:29:28.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/5313", "record": "CVE-2017-8409", "field": "creation_timestamp", "uuid": "213295aa-4fbe-4d68-b483-3c0c594983ee", "content": "ATENTION\u203c New - CVE-2017-8409\n\nAn issue was discovered on D-Link DCS-1130 devices. The device requires that a user logging to the device to provide a username and password. However, the device does not enforce the same restriction on a specific URL thereby allowing any attacker in possession of that to view the live video feed. The severity of this attack is enlarged by the fact that there more than 100,000 D-Link devices out there.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/5313", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 234638187.910028, "hours": 65177.274419452224, "days": 2715.719767477176, "min_seconds": 234551787.910028, "max_seconds": 234638187.910028, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-06-07T00:00:00Z", "date_only": false, "value": "2019-06-07T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2017-8409", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-12T17:16:27.910Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 232390019.910028, "hours": 64552.78330834112, "days": 2689.699304514213, "min_seconds": 232390019.910028, "max_seconds": 232390019.910028, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-07-03T00:29:28Z", "date_only": false, "value": "2019-07-03T00:29:28.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/5313", "record": "CVE-2017-8409", "field": "creation_timestamp", "uuid": "213295aa-4fbe-4d68-b483-3c0c594983ee", "content": "ATENTION\u203c New - CVE-2017-8409\n\nAn issue was discovered on D-Link DCS-1130 devices. The device requires that a user logging to the device to provide a username and password. However, the device does not enforce the same restriction on a specific URL thereby allowing any attacker in possession of that to view the live video feed. The severity of this attack is enlarged by the fact that there more than 100,000 D-Link devices out there.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/5313", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-12T17:16:27.910Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}