Exploitation Summary
EIP tracks 1 public exploit for CVE-2017-14335. PoCs published by SecuriTeam.
AI-analyzed exploit summary This exploit demonstrates an arbitrary password change vulnerability in Hanbanggaoke webcams by sending a crafted PUT request to the /ISAPI/Security/users/1 endpoint, allowing an attacker to reset the admin password without proper authentication.
Description
On Beijing Hanbang Hanbanggaoke devices, because user-controlled input is not sufficiently sanitized, sending a PUT request to /ISAPI/Security/users/1 allows an admin password change.
Exploits (1)
This exploit demonstrates an arbitrary password change vulnerability in Hanbanggaoke webcams by sending a crafted PUT request to the /ISAPI/Security/users/1 endpoint, allowing an attacker to reset the admin password without proper authentication.
References (1)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N