Read the docs
TI-2017-07826 Aliases CVE-2017-10718GHSA-wx82-7xpg-jhxh

Recently it was discovered as a part of the research on IoT devices in the most recent…

Priority LOW 32CWE-255Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · High · None
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that any malicious user connecting to the device can change the default SSID and password thereby denying the owner an access to his/her own device. This device acts as an Endoscope camera that allows its users to use it in various industrial systems and settings, car garages, and also in some cases in the medical clinics to get access to areas that are difficult for a human being to reach. Any breach of this system can allow an attacker to get access to video feed and pictures viewed by that user and might allow them to get a foot hold in air gapped networks especially in case of nation critical infrastructure/industries.

Why it matters now

EPSS 0.0183 78th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:ishekar:endoscope_camera_firmware:*:*:*:*:*:*:*:*all versionsVulnerableIshekar
cpe:2.3:h:ishekar:endoscope_camera:-:*:*:*:*:*:*:*not specified by NVDRunning onIshekar
  • cpe:2.3:o:ishekar:endoscope_camera_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ishekar
  • cpe:2.3:h:ishekar:endoscope_camera:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ishekar

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-10718
  2. 2026-10-03 Alias added: GHSA-wx82-7xpg-jhxh

References

Exploit 1

Advisory 2

  • TI-2017-07832 Recently it was discovered as a part of the research on IoT devices in the most recent… CVSS 3.0HIGH 8.8
  • TI-2017-07831 Recently it was discovered as a part of the research on IoT devices in the most recent… CVSS 3.0HIGH 8.8
  • TI-2017-07830 Recently it was discovered as a part of the research on IoT devices in the most recent… CVSS 3.0HIGH 7.8
  • TI-2017-07828 Recently it was discovered as a part of the research on IoT devices in the most recent… CVSS 3.0HIGH 7.8
  • TI-2017-07827 Recently it was discovered as a part of the research on IoT devices in the most recent… CVSS 3.0MEDIUM 6.5
  • TI-2017-07829 Recently it was discovered as a part of the research on IoT devices in the most recent… CVSS 3.0MEDIUM 6.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences