CVE-2018-17240

Опубликовано: 10 июн. 2022

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Средний

Описание

There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcore that allows an unauthenticated attacker to exfiltrate sensitive information from the network configuration (e.g., username and password).

Ссылки

https://github.com/BBge/CVE-2018-17240
Third Party Advisory
https://github.com/BBge/CVE-2018-17240/blob/main/exploit.py
Exploit
Third Party Advisory
https://www.bbge.org/file/exploit.py
Broken Link
https://github.com/BBge/CVE-2018-17240
Third Party Advisory
https://github.com/BBge/CVE-2018-17240/blob/main/exploit.py
Exploit
Third Party Advisory
https://www.bbge.org/file/exploit.py
Broken Link

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:netwavepr:indoor_ip_camera_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netwavepr:indoor_ip_camera:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:netwavepr:outdoor_ip_camera_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netwavepr:outdoor_ip_camera:-:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.31015

Средний

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-401

Связанные уязвимости

GHSA-c5c9-f2v8-rfmg