packetstormsecurity.com
http://packetstormsecurity.com/files/145386/Zivif-PR115-204-P-RS-2.3.4.2103-Bypass-Command-Injection-Hardcoded-Password.html CVE-2017-17107
CRITICAL
zivif pr115-204-p-rs_firmware Use of Hard-coded Credentials
Record summary
CVE-2017-17107 has a selected CVSS score of 9.8 (critical).
Description
Zivif PR115-204-P-RS V2.3.4.2103 web cameras contain a hard-coded cat1029 password for the root user. The SONIX operating system's setup renders this password unchangeable and it can be used to access the device via a TELNET session.
Description source: CVE List
Exploitation context
Known exploitation
- VulnCheck KEV
- Listed · May 6, 2024 · VulnCheck
- Reported exploitation
- Observed · VulnCheck
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
pr115-204-p-rs_firmwareBrowse zivif / pr115-204-p-rs_firmware | VulnCheck | Version data not supplied | |
References
420171212 Three exploits for Zivif Web Cameras (may impact others)mailing list
http://seclists.org/fulldisclosure/2017/Dec/42 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2017-17107 twitter.com
https://twitter.com/silascutler/status/938052460328968192