CVE-2021-40378
high · 8.1An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. /cgi-bin/support/killps.cgi deletes all data from the device.
8.1
CVSS
15.0%
EPSS (exploit prob.)
97th
EPSS percentile
2021-09-01
Published
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Weaknesses
CWE-862
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| comprotech | ip70_firmware | 2.08_7130218 |
| comprotech | ip70 | all versions |
| comprotech | ip570_firmware | 2.08_7130520 |
| comprotech | ip570 | all versions |
| comprotech | ip60_firmware | all versions |
| comprotech | ip60 | all versions |
| comprotech | tn540_firmware | all versions |
| comprotech | tn540 | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://packetstormsecurity.com/files/164024/Compro-Technology-IP-Camera-Denial-Of-Service.html
- https://github.com/icekam/0day/blob/main/Compro-Technology-Camera-has-multiple-vulnerabilities.md
- http://packetstormsecurity.com/files/164024/Compro-Technology-IP-Camera-Denial-Of-Service.html
- https://github.com/icekam/0day/blob/main/Compro-Technology-Camera-has-multiple-vulnerabilities.md
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2021-40378