7.5
CVE-2019-6973
- EPSS 13.78%
- Veröffentlicht 21.03.2019 16:01:10
- Zuletzt bearbeitet 21.11.2024 04:47:20
- Erkennungen
LoginSricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.x) is configured for an iterative queueing approach (aka non-threaded operation) with a timeout of several seconds.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Genivia ≫ Gsoap Version 2.8.0
Sricam ≫ Nvs001 Version -
Sricam ≫ Sh016 Version -
Sricam ≫ Sh024 Version -
Sricam ≫ Sh026 Version -
Sricam ≫ Sh027 Version -
Sricam ≫ Sp007 Version -
Sricam ≫ Sp008 Version -
Sricam ≫ Sp009 Version -
Sricam ≫ Sp012 Version -
Sricam ≫ Sp015 Version -
Sricam ≫ Sp017 Version -
Sricam ≫ Sp018 Version -
Sricam ≫ Sp019 Version -
Sricam ≫ Sp020 Version -
Sricam ≫ Sp023 Version -
Sricam ≫ Sh016 Version -
Sricam ≫ Sh024 Version -
Sricam ≫ Sh026 Version -
Sricam ≫ Sh027 Version -
Sricam ≫ Sp007 Version -
Sricam ≫ Sp008 Version -
Sricam ≫ Sp009 Version -
Sricam ≫ Sp012 Version -
Sricam ≫ Sp015 Version -
Sricam ≫ Sp017 Version -
Sricam ≫ Sp018 Version -
Sricam ≫ Sp019 Version -
Sricam ≫ Sp020 Version -
Sricam ≫ Sp023 Version -
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 13.78% | 0.96 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.5 | 3.9 | 3.6 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| NIST | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
http://packetstormsecurity.com/files/151377/Sricam-gSOAP-2.8-Denial-Of-Service.html
https://github.com/bitfu/sricam-gsoap2.8-dos-exploit
https://www.exploit-db.com/exploits/46261/