PT-2019-8418 · Annke · Annke Sp1 Hd Wireless Camera

Jamie Riden · Publicado 2019-08-07 · Atualizado 2019-08-14 · CVE-2017-18483

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions ANNKE SP1 HD wireless camera version 3.4.1.1604071109

Description The issue allows for cross-site scripting (XSS) attacks via a crafted SSID. This means an attacker could potentially inject malicious code into the device by manipulating the SSID, which could lead to unauthorized access or control of the device.

Recommendations For ANNKE SP1 HD wireless camera version 3.4.1.1604071109, consider changing the SSID to a secure value and avoid using any user-provided input for the SSID until a patch is available. As a temporary workaround, restrict access to the device's web interface to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-18483

Produtos afetados

Annke Sp1 Hd Wireless Camera

Referências · 3

• 🔥 https://pentestpartners.com/security-blog/nifty-xss-in-annke-sp1-hd-wireless-camera · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-18483 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-18483 · Aviso do Fabricante