EDB-43142
PoCWireless IP Camera (P2P) WIFICAM - Remote Code Execution
Exploit ansehen Quelle exploit_dbTyp remoteAutor PierreKimSecveröffentlicht 2017-03-08Katalog exploit_db
01
ausgenutzte CVEs (5)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2017-8225US | critical9.8 | Exploit | ||
On Wireless IP Camera (P2P) WIFICAM devices, access to .ini files (containing credentials) is not correctly checked. An attacker can bypass authentication by providing an empty log… | ||||
| CVE-2017-8224US | critical9.8OT hoch | Exploit | ||
Wireless IP Camera (P2P) WIFICAM devices have a backdoor root account that can be accessed with TELNET. | ||||
| CVE-2017-8223US | high7.5 | Exploit | ||
On Wireless IP Camera (P2P) WIFICAM devices, an attacker can use the RTSP server on port 10554/tcp to watch the streaming without authentication via tcp/av0_1 or tcp/av0_0. | ||||
| CVE-2017-8222US | high7.5 | Exploit | ||
Wireless IP Camera (P2P) WIFICAM devices have an "Apple Production IOS Push Services" private RSA key and certificate stored in /system/www/pem/ck.pem inside the firmware, which al… | ||||
| CVE-2017-8221US | high7.5OT erhöht | Exploit | ||
Wireless IP Camera (P2P) WIFICAM devices rely on a cleartext UDP tunnel protocol (aka the Cloud feature) for communication between an Android application and a camera device, which… | ||||
scry
Funktionierende Exploits wie dieser zielen auf über das Internet erreichbare Systeme. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan