Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mhxf-r4fj-xrhr

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An issue was discovered on Ichano AtHome IP Camera devices. The device runs the "noodles" binary - a service on port 1300 that allows a remote (LAN) unauthenticated user to run arbitrary commands. This binary requires the "system" XML element for specifying the command. For example, a id command results in a <system_ack>ok</system_ack> response.

An issue was discovered on Ichano AtHome IP Camera devices. The device runs the "noodles" binary - a service on port 1300 that allows a remote (LAN) unauthenticated user to run arbitrary commands. This binary requires the "system" XML element for specifying the command. For example, a id command results in a <system_ack>ok</system_ack> response.

EPSS

Процентиль: 89%
0.04978
Низкий

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.8
nvd
около 8 лет назад

An issue was discovered on Ichano AtHome IP Camera devices. The device runs the "noodles" binary - a service on port 1300 that allows a remote (LAN) unauthenticated user to run arbitrary commands. This binary requires the "system" XML element for specifying the command. For example, a <system>id</system> command results in a <system_ack>ok</system_ack> response.

CVSS3: 9.8
fstec
около 8 лет назад

Уязвимость микропрограммного обеспечения камер видеонаблюдения AtHome IP Camera, связанная с отсутствием мер по очистке входных данных, позволяющая нарушителю выполнять произвольные команды

EPSS

Процентиль: 89%
0.04978
Низкий

9.8 Critical

CVSS3