CVE-2019-6973
high · 7.5Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.x) is configured for an iterative queueing approach (aka non-threaded operation) with a timeout of several seconds.
7.5
CVSS
13.8%
EPSS (exploit prob.)
96th
EPSS percentile
2019-03-21
Published
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| genivia | gsoap | 2.8.0 |
| sricam | nvs001 | all versions |
| sricam | sh016 | all versions |
| sricam | sh024 | all versions |
| sricam | sh026 | all versions |
| sricam | sh027 | all versions |
| sricam | sp007 | all versions |
| sricam | sp008 | all versions |
| sricam | sp009 | all versions |
| sricam | sp012 | all versions |
| sricam | sp015 | all versions |
| sricam | sp017 | all versions |
| sricam | sp018 | all versions |
| sricam | sp019 | all versions |
| sricam | sp020 | all versions |
| sricam | sp023 | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://packetstormsecurity.com/files/151377/Sricam-gSOAP-2.8-Denial-Of-Service.html
- https://github.com/bitfu/sricam-gsoap2.8-dos-exploit
- https://www.exploit-db.com/exploits/46261/
- http://packetstormsecurity.com/files/151377/Sricam-gSOAP-2.8-Denial-Of-Service.html
- https://github.com/bitfu/sricam-gsoap2.8-dos-exploit
- https://www.exploit-db.com/exploits/46261/
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2019-6973