CVE-2019-6973

EPSS 13.8%

Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.x) is configured for an iterative queueing approach (aka non-threaded operation) with a timeout of several seconds.

Productos afectados

n/a · n/a

PoCs públicas encontradas — 3

cve_referencepacketstormsecurity.com/files/151377/Sricam-gSOAP-2.8-Denial-Of-Service.htmlno verificado cve_referencewww.exploit-db.com/exploits/46261/no verificado exploitdbwww.exploit-db.com/exploits/46261no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://packetstormsecurity.com/files/151377/Sricam-gSOAP-2.8-Denial-Of-Service.html https://github.com/bitfu/sricam-gsoap2.8-dos-exploit https://www.exploit-db.com/exploits/46261/