CVEvulnerability
CVE-2019-6973
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-03-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Description
Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.x) is configured for an iterative queueing approach (aka non-threaded operation) with a timeout of several seconds.
Affected configurations
• genivia gsoap 2.8.0
References
- http://packetstormsecurity.com/files/151377/Sricam-gSOAP-2.8-Denial-Of-Service.html Exploit, Third Party Advisory, VDB Entry
- https://github.com/bitfu/sricam-gsoap2.8-dos-exploit Third Party Advisory
- https://www.exploit-db.com/exploits/46261/ Exploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/151377/Sricam-gSOAP-2.8-Denial-Of-Service.html Exploit, Third Party Advisory, VDB Entry
- https://github.com/bitfu/sricam-gsoap2.8-dos-exploit Third Party Advisory
- https://www.exploit-db.com/exploits/46261/ Exploit, Third Party Advisory, VDB Entry