CVE-2018-6407

HIGH

Conceptronic Cipcamptiwl Firmware - Improper Input Validation

Title source: rule

Description

An issue was discovered on Conceptronic CIPCAMPTIWL V3 0.61.30.21 devices. An unauthenticated attacker can crash a device by sending a POST request with a huge body size to /hy-cgi/devices.cgi?cmd=searchlandevice. The crash completely freezes the device.

Exploits (1)

nomisec WORKING POC 8 stars

by dreadlocked · poc

https://github.com/dreadlocked/ConceptronicIPCam_MultipleVulnerabilities

View Code ZIP pw:eip

References (1)

Core 1

Core References

Third Party Advisory x_refsource_misc

https://github.com/dreadlocked/ConceptronicIPCam_MultipleVulnerabilities/

View Writeup ZIP pw:eip

Scores

CVSS v3 7.5

EPSS 0.2219

EPSS Percentile 95.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-20

Status published

Products (2)

conceptronic/cipcamptiwl_firmware 00.30.01.0047p3

conceptronic/cipcamptiwl_web_firmware 0.61.30.21

Published Jan 30, 2018

Tracked Since Feb 18, 2026