CVE-2019-6973 Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.x) is configured for an iterative queueing approach (aka non...
HighCVSS 7.5
EPSS 13.8%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.x) is configured for an iterative queueing approach (aka non-threaded operation) with a timeout of several seconds.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| genivia gsoap | = 2.8.0 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- github.com third-party-advisory
- 46261 exploit third-party-advisory vdb-entry