Zivif

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Zivif records in CISA KEV

No Zivif vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pr115-204-p-rs Firmware 3 records HIGH

Records

3 records

TI-2017-12556 CVE-2017-17105 · GHSA-whhw-3qj8-6jhm

Zivif PR115-204-P-RS V2.3.4.2103 and V4.7.4.2121 (and possibly in-between versions) web…

HIGH 83

Zivif PR115-204-P-RS V2.3.4.2103 and V4.7.4.2121 (and possibly in-between versions) web cameras are vulnerable to unauthenticated, blind remote command injection via CGI scripts used as part of the web interface, as demo…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.84558 Published 2017-12-18 No fix listed CWE-78

TI-2017-12557 CVE-2017-17106 · GHSA-r842-qg2m-qr63

Credentials for Zivif PR115-204-P-RS V2.3.4.2103 Webcams can be obtained by an…

MEDIUM 58

Credentials for Zivif PR115-204-P-RS V2.3.4.2103 Webcams can be obtained by an unauthenticated remote attacker using a standard web /cgi-bin/hi3510/param.cgi?cmd=getuser HTTP request.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.15256 Published 2017-12-18 No fix listed CWE-522

TI-2017-12558 CVE-2017-17107 · GHSA-242p-f8j8-3jmw

Zivif PR115-204-P-RS V2.3.4.2103 web cameras contain a hard-coded cat1029 password for…

MEDIUM 49

Zivif PR115-204-P-RS V2.3.4.2103 web cameras contain a hard-coded cat1029 password for the root user.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03879 Published 2017-12-18 No fix listed CWE-798

Open these records in search →

Critical	3
High	0
Medium	0
Low	0
No CVSS	0