CVE-2017-8222

Опубликовано: 25 апр. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Wireless IP Camera (P2P) WIFICAM devices have an "Apple Production IOS Push Services" private RSA key and certificate stored in /system/www/pem/ck.pem inside the firmware, which allows attackers to obtain sensitive information.

Ссылки

http://seclists.org/fulldisclosure/2017/Mar/23
Exploit
Mailing List
Third Party Advisory
https://pierrekim.github.io/blog/2017-03-08-camera-goahead-0day.html#rsa-lulz
Exploit
Third Party Advisory
http://seclists.org/fulldisclosure/2017/Mar/23
Exploit
Mailing List
Third Party Advisory
https://pierrekim.github.io/blog/2017-03-08-camera-goahead-0day.html#rsa-lulz
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:wificam:wireless_ip_camera_\(p2p\)_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:wificam:wireless_ip_camera_\(p2p\):-:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.07265

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-522

Связанные уязвимости

GHSA-mjff-gwfw-rfgm