This vulnerability (CVE-2024-41623) affects D3D Security D3D IP Camera (D8801) version V9.1.17.1.4-20180428. It allows an unauthenticated remote attacker to execute arbitrary code by sending a specially crafted payload. The issue is categorized under CWE-94 (Improper Control of Generation of Code), indicating that the product improperly processes input leading to code execution. The CVSS v3.1 base score is 9.8, reflecting critical severity with network attack vector, low attack complexity, no privileges or user interaction required, and full confidentiality, integrity, and availability impact. There is no known exploit in the wild and no vendor advisory or patch information available at this time.

Successful exploitation results in remote code execution with full system compromise, affecting confidentiality, integrity, and availability of the affected device. Given the critical CVSS score of 9.8, this vulnerability poses a severe risk to affected devices, potentially allowing attackers to fully control the IP camera remotely.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the affected device and monitor for suspicious activity. Avoid exposing the device directly to untrusted networks.