PT-2019-8418 · Annke · Annke Sp1 Hd Wireless Camera

Jamie Riden · Published 2019-08-07 · Updated 2019-08-14 · CVE-2017-18483

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions ANNKE SP1 HD wireless camera version 3.4.1.1604071109

Description The issue allows for cross-site scripting (XSS) attacks via a crafted SSID. This means an attacker could potentially inject malicious code into the device by manipulating the SSID, which could lead to unauthorized access or control of the device.

Recommendations For ANNKE SP1 HD wireless camera version 3.4.1.1604071109, consider changing the SSID to a secure value and avoid using any user-provided input for the SSID until a patch is available. As a temporary workaround, restrict access to the device's web interface to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2017-18483

Affected Products

Annke Sp1 Hd Wireless Camera

References · 3

• 🔥 https://pentestpartners.com/security-blog/nifty-xss-in-annke-sp1-hd-wireless-camera · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-18483 · Security Note
• https://osv.dev/vulnerability/CVE-2017-18483 · Vendor Advisory