Denial of service

2021-06-1819:15:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.3%

JSON

An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67.Attacker could send a huge amount of TCP SYN packet to make web service’s resource exhausted. Then the web server is denial-of-service.

CPENameOperatorVersion
camera_g3_flex_firmwareeq.v4.30.0.67-uvc

CPE	Name	Operator	Version
	camera_g3_flex_firmware	eq	.v4.30.0.67-uvc

References

github.com/Jian-Xian/CVE-POC/blob/master/CVE-2021-33820.md

linuxhint.com/hping3/

store.ui.com/collections/unifi-protect-cameras/products/unifi-video-g3-flex-camera