CVE-2021-33818

HIGH

UniFi Protect G3 FLEX Camera UVC.v4.30.0.67 - Denial of Service via Incomplete HTTP Request

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2021-33818. PoCs published by Jian-Xian.

AI-analyzed exploit summary This repository provides a detailed technical writeup on CVE-2021-33818, a Slow HTTP DoS vulnerability affecting UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67. It includes a description of the attack mechanism, demonstration screenshots, and references to tools like slowhttptest.

Description

An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67. Attackers can use slowhttptest tool to send incomplete HTTP request, which could make server keep waiting for the packet to finish the connection, until its resource exhausted. Then the web server is denial-of-service.

Exploits (1)

github WRITEUP 10 stars

by Jian-Xian · poc

https://github.com/Jian-Xian/CVE-POC/tree/master/CVE-2021-33818.md

View Code ZIP pw:eip

This repository provides a detailed technical writeup on CVE-2021-33818, a Slow HTTP DoS vulnerability affecting UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67. It includes a description of the attack mechanism, demonstration screenshots, and references to tools like slowhttptest.

Classification

Writeup 90%

Attack Type

Dos

Complexity

Trivial

Reliability

Reliable

Target: UniFi Protect G3 FLEX Camera UVC.v4.30.0.67

No auth needed

Prerequisites: Access to the target device's web server · slowhttptest tool

MITRE ATT&CK