7.5

CVE-2019-6973

Exploit

Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.x) is configured for an iterative queueing approach (aka non-threaded operation) with a timeout of several seconds.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Genivia ≫ Gsoap Version2.8.0
   Sricam ≫ Nvs001 Version-
   Sricam ≫ Sh016 Version-
   Sricam ≫ Sh024 Version-
   Sricam ≫ Sh026 Version-
   Sricam ≫ Sh027 Version-
   Sricam ≫ Sp007 Version-
   Sricam ≫ Sp008 Version-
   Sricam ≫ Sp009 Version-
   Sricam ≫ Sp012 Version-
   Sricam ≫ Sp015 Version-
   Sricam ≫ Sp017 Version-
   Sricam ≫ Sp018 Version-
   Sricam ≫ Sp019 Version-
   Sricam ≫ Sp020 Version-
   Sricam ≫ Sp023 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 15.69% 0.944
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
https://www.exploit-db.com/exploits/46261/
Third Party Advisory
Exploit
VDB Entry