CVE-2017-17107

Published: Dic 19, 2017 Last Modified: Apr 20, 2025 EU-VD ID: EUVD-2017-8273 Aliases: GSD-2017-17107
ExploitDB:
Other exploit source:
Google Dorks:
CRITICAL 9,8
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
HIGH 10,0
Source: [email protected]
Access Vector: network
Access Complexity: low
Authentication: none
Confidentiality: complete
Integrity: complete
Availability: complete

Description

AI Translation Available

Zivif PR115-204-P-RS V2.3.4.2103 web cameras contain a hard-coded cat1029 password for the root user. The SONIX operating system's setup renders this password unchangeable and it can be used to access the device via a TELNET session.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0376
Percentile
0,9th
Updated

EPSS Score Trend (Last 91 Days)

798

Use of Hard-coded Credentials

Draft
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Access Control Integrity Confidentiality Availability Other
Potential Impacts:
Bypass Protection Mechanism Read Application Data Gain Privileges Or Assume Identity Execute Unauthorized Code Or Commands Other
Applicable Platforms
Technologies: Mobile, ICS/OT
Likelihood of Exploit: High
View CWE Details
Operating System

Pr115-204-P-Rs Firmware by Zivif

Product Information
Vendor Zivif
Product Pr115-204-P-Rs Firmware
Version 2.3.4.2103
cpe:2.3:o:zivif:pr115-204-p-rs_firmware:2.3.4.2103:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
http://packetstormsecurity.com/files/145386/Zivif-PR115-204…
Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/145386/Zivif-PR115-204-P-RS-2.3.4.2103-Byp…
http://seclists.org/fulldisclosure/2017/Dec/42
Exploit Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2017/Dec/42
https://twitter.com/silascutler/status/938052460328968192
Third Party Advisory
https://twitter.com/silascutler/status/938052460328968192
http://packetstormsecurity.com/files/145386/Zivif-PR115-204…
Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/145386/Zivif-PR115-204-P-RS-2.3.4.2103-Byp…
http://seclists.org/fulldisclosure/2017/Dec/42
Exploit Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2017/Dec/42
https://twitter.com/silascutler/status/938052460328968192
Third Party Advisory
https://twitter.com/silascutler/status/938052460328968192