CVE-2018-5726

Опубликовано: 16 янв. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 5

EPSS Средний

Описание

MASTER IPCAMERA01 3.3.4.2103 devices allow remote attackers to obtain sensitive information via a crafted HTTP request, as demonstrated by the username, password, and configuration settings.

Ссылки

http://syrion.me/blog/master-ipcam/
Exploit
Third Party Advisory
https://packetstormsecurity.com/files/145935/Master-IP-CAM-01-Hardcoded-Password-Unauthenticated-Access.html
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/43693/
Third Party Advisory
VDB Entry
http://syrion.me/blog/master-ipcam/
Exploit
Third Party Advisory
https://packetstormsecurity.com/files/145935/Master-IP-CAM-01-Hardcoded-Password-Unauthenticated-Access.html
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/43693/
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:barni:master_ip_camera01_firmware:3.3.4.2103:*:*:*:*:*:*:*

cpe:2.3:h:barni:master_ip_camera01:-:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.57603

Средний

9.8 Critical

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-wr87-wjmg-4vfj