CVE-2019-6973

Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.x) is configured for an iterative queueing approach (aka non-threaded operation) with a timeout of several seconds.

CVSS v3.0

7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

13.78% chance of exploitation in the next 30 days, 96th percentile

Published

2019-03-17

Updated

2024-08-04

Proof-of-concept exploits (2)

• http://packetstormsecurity.com/files/151377/Sricam-gSOAP-2.8-Denial-Of-Service.html
• bitfu/sricam-gsoap2.8-dos-exploit3★ · 2019-01-25

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/46261

References

• CVE Record
• NVD entry

Related

• CVE-2017-16725
• CVE-2018-10088
• CVE-2019-6972
• CVE-2019-6974
• CVE-2019-6971
• CVE-2019-6977