Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2017-8225
HistoryApr 25, 2017 - 8:59 p.m.

CVE-2017-8225

2017-04-2520:59:00
CWE-522
[email protected]
web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.4%

JSON

On Wireless IP Camera (P2P) WIFICAM devices, access to .ini files (containing credentials) is not correctly checked. An attacker can bypass authentication by providing an empty loginuse parameter and an empty loginpas parameter in the URI.

Affected configurations

NVD
Node
wificamwireless_ip_camera_\(p2p\)_firmwareMatch-
AND
wificamwireless_ip_camera_\(p2p\)Match-

Related

prion 1
threatpost 2
cvelist 1
nessus 1
thn 1
checkpoint_advisories 1
cve 1
zdt 1
openvas 1
seebug 1
prion
prion
Authentication flaw
2017-04-25 20:59:00
threatpost
threatpost
Hackers Prepping IOTroop Botnet with Exploits
2017-10-25 14:33:18
‘IOTroop’ Botnet Could Dwarf Mirai in Size and Devastation, Says Researcher
2017-10-20 14:17:27
cvelist
cvelist
CVE-2017-8225
2022-10-03 16:23:06
nessus
nessus
GoAhead System.ini Leak
2017-08-03 00:00:00
thn
thn
Hacker Distributes Backdoored IoT Vulnerability Scanning Script to Hack Script Kiddies
2017-11-08 19:55:00
checkpoint_advisories
checkpoint_advisories
Wireless IP Camera (P2P) WIFICAM Cameras Information Disclosure (CVE-2017-8225)
2017-04-27 00:00:00
cve
cve
CVE-2017-8225
2022-10-03 16:23:06
zdt
zdt
WIFICAM Wireless IP Camera (P2P) - Unauthenticated Remote Code Execution Exploit
2017-11-15 00:00:00
openvas
openvas
Multiple IP-Cameras (P2P) WIFICAM Cameras Multiple Vulnerabilities
2017-03-08 00:00:00
seebug
seebug
The Wireless IP Camera (P2P) WIFICAM Multiple vulnerabilities
2017-03-08 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.4%

JSON
Related for NVD:CVE-2017-8225
prion1threatpost2cvelist1nessus1thn1checkpoint_advisories1cve1zdt1openvas1seebug1