vulnwire
7.5high

CVE-2019-6973in critical feed1 exploit

Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8…

Published 7 y ago · modified 4 mo ago · JSON

CVSS
7.5
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
13.8%
percentile 97%
Public exploits
1
Exploit-DB

Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.x) is configured for an iterative queueing approach (aka non-threaded operation) with a timeout of several seconds.

Exploit prediction (EPSS)

13.78% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.

Exploits and detections

  • EDB-46261 Sricam gSOAP 2.8 - Denial of Service · dos · 2019-01-28

CVSS scores

Assigned byVersionScoreVector
NVD3.07.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD2.05.0AV:N/AC:L/Au:N/C:N/I:N/A:P

References

  • exploit-db.com /exploits/46261/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
  • packetstormsecurity.com /files/151377/Sricam-gSOAP-2.8-Denial-Of-Service.html · x_refsource_MISC, x_transferred
  • github.com /bitfu/sricam-gsoap2.8-dos-exploit · x_refsource_MISC, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.