CVE-2017-8403PoC(360fly / 4k_camera)

LOWCVSS 8.8 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

360fly 4K cameras allow unauthenticated Wi-Fi password changes and complete access with REST by using the Bluetooth Low Energy pairing procedure, which is available at any time and does not require a password. This affects firmware 2.1.4. Exploitation can use the 360fly Android or iOS application, or the BlueZ gatttool program.

1.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-287

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • 4k_camera
  • 4k_camera_firmware

Threat summary

  • Public PoC is present in monitored signal
  • 1 mentions across 1 observed day

What's happening

  • PoC mentioned or linked in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
Products
4k_camera4k_camera_firmware

2 versions affected across 2 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-08-06: 1PoC Mentioned / Linked · 2026-08-06: 108-06
Signal classification1 categories
PoC
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • Gerard Fuguet@GerardFuguet
    PoC

    @Seifreed @rootedcon Yo aún recuerdo cuando me flipé con mi primer CVE el de la cámara 360 grados dije fua es que me pillan si o si y xoff xD me lo tomé bien, me dije.. debo de seguir sin tirar la toalla + y mejor. Cierto que el video me lo fulminaron de YT pero ahí anda 🤘🤠 https://archive.org/details/hack-action-camera-360-fly-4k-cve-2017-8403

    Post summary

    The tweet links to a video that demonstrates exploitation of CVE‑2017‑8403 in a 360‑degree camera, effectively providing a proof‑of‑concept without detailed technical or patch information.

    0001099
    261 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
HW360fly4k_camera---
OS360fly4k_camera_firmware2.1.4--

Explore more