Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-29gq-wq8x-vfcr

Опубликовано: 02 фев. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

The use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update makes TRENDnet TV-IP651WI Network Camera firmware version v1.07.01 and earlier vulnerable to firmware modification attacks. An attacker can conduct a man-in-the-middle (MITM) attack to modify the new firmware image and bypass the checksum verification.

The use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update makes TRENDnet TV-IP651WI Network Camera firmware version v1.07.01 and earlier vulnerable to firmware modification attacks. An attacker can conduct a man-in-the-middle (MITM) attack to modify the new firmware image and bypass the checksum verification.

EPSS

Процентиль: 13%
0.00042
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-354

Связанные уязвимости

CVSS3: 5.9
nvd
около 3 лет назад

The use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update makes TRENDnet TV-IP651WI Network Camera firmware version v1.07.01 and earlier vulnerable to firmware modification attacks. An attacker can conduct a man-in-the-middle (MITM) attack to modify the new firmware image and bypass the checksum verification.

EPSS

Процентиль: 13%
0.00042
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-354