Vulnerability Description
A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker to craft a malformed HTTP ("GET system.ini HTTP/1.1\n\n" - note the lack of "/" in the path field of the request) request that will disclose the configuration file with the login password.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Embedthis | Goahead | - |
Related Weaknesses (CWE)
References
- https://www.cybereason.com/cve-ip-cameras/ExploitThird Party Advisory
- https://www.cybereason.com/zero-day-exploits-turn-hundreds-of-thousands-of-ip-caExploitTechnical DescriptionThird Party Advisory
- https://www.cybereason.com/cve-ip-cameras/ExploitThird Party Advisory
- https://www.cybereason.com/zero-day-exploits-turn-hundreds-of-thousands-of-ip-caExploitTechnical DescriptionThird Party Advisory
FAQ
What is CVE-2017-5674?
CVE-2017-5674 is a vulnerability with a CVSS score of 9.8 (CRITICAL). A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker to craft a malformed HTTP ("GET system.ini HTTP/1.1\n\n" - n...
How severe is CVE-2017-5674?
CVE-2017-5674 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2017-5674?
Check the references section above for vendor advisories and patch information. Affected products include: Embedthis Goahead.