PT-2022-8038 · Netwave · Netwave Ip Camera

Published 2022-06-10 · Updated 2022-06-17 · CVE-2018-17240

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Netwave IP camera devices (affected versions not specified)

Description The issue allows an unauthenticated attacker to exfiltrate sensitive information, such as username and password, from the network configuration of Netwave IP camera devices through a memory dump vulnerability at the /proc/kcore API endpoint.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2018-17240

Affected Products

Netwave Ip Camera

References · 6

• 🔥 https://github.com/Xewdy444/Netgrave · Exploit
• 🔥 https://github.com/BBge/CVE-2018-17240 · Exploit
• 🔥 https://github.com/BBge/CVE-2018-17240/blob/main/exploit.py · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-17240 · Security Note
• https://bbge.org/file/exploit.py · Note
• https://t.me/cvenotify/31437 · Telegram Post