ID CVE-2019-6973
Summary Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.x) is configured for an iterative queueing approach (aka non-threaded operation) with a timeout of several seconds.
References
Vulnerable Configurations
  • cpe:2.3:a:genivia:gsoap:2.8.0:*:*:*:*:*:*:*
    cpe:2.3:a:genivia:gsoap:2.8.0:*:*:*:*:*:*:*
  • cpe:2.3:h:sricam:nvs001:-:*:*:*:*:*:*:*
    cpe:2.3:h:sricam:nvs001:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sricam:sh016:-:*:*:*:*:*:*:*
    cpe:2.3:h:sricam:sh016:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sricam:sh024:-:*:*:*:*:*:*:*
    cpe:2.3:h:sricam:sh024:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sricam:sh026:-:*:*:*:*:*:*:*
    cpe:2.3:h:sricam:sh026:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sricam:sh027:-:*:*:*:*:*:*:*
    cpe:2.3:h:sricam:sh027:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sricam:sp007:-:*:*:*:*:*:*:*
    cpe:2.3:h:sricam:sp007:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sricam:sp008:-:*:*:*:*:*:*:*
    cpe:2.3:h:sricam:sp008:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sricam:sp009:-:*:*:*:*:*:*:*
    cpe:2.3:h:sricam:sp009:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sricam:sp012:-:*:*:*:*:*:*:*
    cpe:2.3:h:sricam:sp012:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sricam:sp015:-:*:*:*:*:*:*:*
    cpe:2.3:h:sricam:sp015:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sricam:sp017:-:*:*:*:*:*:*:*
    cpe:2.3:h:sricam:sp017:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sricam:sp018:-:*:*:*:*:*:*:*
    cpe:2.3:h:sricam:sp018:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sricam:sp019:-:*:*:*:*:*:*:*
    cpe:2.3:h:sricam:sp019:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sricam:sp020:-:*:*:*:*:*:*:*
    cpe:2.3:h:sricam:sp020:-:*:*:*:*:*:*:*
  • cpe:2.3:h:sricam:sp023:-:*:*:*:*:*:*:*
    cpe:2.3:h:sricam:sp023:-:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 24-08-2020 - 17:37)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
exploit-db 46261
misc
Last major update 24-08-2020 - 17:37
Published 21-03-2019 - 16:01
Last modified 24-08-2020 - 17:37
Back to Top