Entreprise d'experts en Sécurité Informatique : Audits et conseils en cybersécurité
Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com


CVE-2019-6973

Description

Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.x) is configured for an iterative queueing approach (aka non-threaded operation) with a timeout of several seconds.

POC

Reference

- http://packetstormsecurity.com/files/151377/Sricam-gSOAP-2.8-Denial-Of-Service.html

- https://github.com/bitfu/sricam-gsoap2.8-dos-exploit

- https://www.exploit-db.com/exploits/46261/

Github

- https://github.com/ARPSyndicate/cve-scores

- https://github.com/ARPSyndicate/cvemon

- https://github.com/bitfu/sricam-gsoap2.8-dos-exploit