PT-2017-3364 · Ichano · Ichano Athome Ip Camera
Publicado
2017-11-21
·
Atualizado
2019-10-03
·
CVE-2017-17761
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Ichano AtHome IP Camera devices (affected versions not specified)
Description
The issue concerns the "noodles" binary, a service running on port 1300, which allows a remote unauthenticated user to execute arbitrary commands. This is achieved by specifying the command within the
system XML element. For instance, sending a <system>id</system> command results in a <system ack>ok</system ack> response. The vulnerability is related to the lack of input data sanitization in the camera's firmware, potentially allowing a remote attacker to exploit this weakness and execute commands using the "noodles" service on port 1300.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Command Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ichano Athome Ip Camera