Vulnerabilities

TI-2017-12558 CVE-2017-17107 · GHSA-242p-f8j8-3jmw

Zivif PR115-204-P-RS V2.3.4.2103 web cameras contain a hard-coded cat1029 password for…

MEDIUM 49

Zivif PR115-204-P-RS V2.3.4.2103 web cameras contain a hard-coded cat1029 password for the root user.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03879 Published 2017-12-18 No fix listed CWE-798

TI-2017-12557 CVE-2017-17106 · GHSA-r842-qg2m-qr63

Credentials for Zivif PR115-204-P-RS V2.3.4.2103 Webcams can be obtained by an…

MEDIUM 58

Credentials for Zivif PR115-204-P-RS V2.3.4.2103 Webcams can be obtained by an unauthenticated remote attacker using a standard web /cgi-bin/hi3510/param.cgi?cmd=getuser HTTP request.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.15256 Published 2017-12-18 No fix listed CWE-522

TI-2017-12556 CVE-2017-17105 · GHSA-whhw-3qj8-6jhm

Zivif PR115-204-P-RS V2.3.4.2103 and V4.7.4.2121 (and possibly in-between versions) web…

HIGH 83

Zivif PR115-204-P-RS V2.3.4.2103 and V4.7.4.2121 (and possibly in-between versions) web cameras are vulnerable to unauthenticated, blind remote command injection via CGI scripts used as part of the web interface, as demo…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.84558 Published 2017-12-18 No fix listed CWE-78

Vulnerabilities

Filters

Zivif PR115-204-P-RS V2.3.4.2103 web cameras contain a hard-coded cat1029 password for…

Credentials for Zivif PR115-204-P-RS V2.3.4.2103 Webcams can be obtained by an…

Zivif PR115-204-P-RS V2.3.4.2103 and V4.7.4.2121 (and possibly in-between versions) web…