Lucene search
MitreCVELIST:CVE-2017-17105HistoryDec 18, 2017 - 5:00 p.m.
CVE-2017-17105
2017-12-1817:00:00
mitre
www.cve.org
Zivif PR115-204-P-RS V2.3.4.2103 and V4.7.4.2121 (and possibly in-between versions) web cameras are vulnerable to unauthenticated, blind remote command injection via CGI scripts used as part of the web interface, as demonstrated by a cgi-bin/iptest.cgi?cmd=iptest.cgi&-time=“1504225666237”&-url=$(reboot) request.
References
packetstormsecurity.com/files/145386/Zivif-PR115-204-P-RS-2.3.4.2103-Bypass-Command-Injection-Hardcoded-Password.html
packetstormsecurity.com/files/158120/Zivif-Camera-2.3.4.2103-iptest.cgi-Blind-Remote-Command-Execution.html
seclists.org/fulldisclosure/2017/Dec/42
twitter.com/silascutler/status/938052460328968192
Related
metasploit
metasploit
Zivif Camera iptest.cgi Blind Remote Command Execution
2020-03-29 22:23:28
cve
cve
CVE-2017-17105
2017-12-19 02:29:41
nvd
nvd
CVE-2017-17105
2017-12-19 02:29:41
attackerkb
attackerkb
CVE-2017-17105
2017-12-19 00:00:00
prion
prion
Command injection
2017-12-19 02:29:00
0daydb
0daydb
Zivif Camera 2.3.4.2103 iptest.cgi Blind Remote Command Execution
2020-06-21 09:03:21
packetstorm
packetstorm
Zivif Camera 2.3.4.2103 iptest.cgi Blind Remote Command Execution
2020-06-16 00:00:00
zdt
zdt
seebug
seebug
Zivif Web Cameras Multiple Vulnerabilities
2017-12-14 00:00:00
thn
thn
mssecure
mssecure
Microsoft research uncovers new Zerobot capabilities
2022-12-21 20:00:00
mmpc
mmpc
Microsoft research uncovers new Zerobot capabilities
2022-12-21 20:00:00