CVE-2018-20050

Mishandling of an empty string on the Jooan JA-Q1H Wi-Fi camera with firmware 21.0.0.91 allows remote attackers to cause a denial of service (crash and reboot) via the ONVIF GetStreamUri method and GetVideoEncoderConfigurationOptions method.
References
Link Resource
https://github.com/iamweifan/jooan/blob/master/es_poc.py Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:qacctv:jooan_ja-q1h_wi-fi_camera_firmware:21.0.0.91:*:*:*:*:*:*:*
cpe:2.3:h:qacctv:jooan_ja-q1h_wi-fi_camera:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-12-10 22:29

Updated : 2024-02-28 16:48


NVD link : CVE-2018-20050

Mitre link : CVE-2018-20050

CVE.ORG link : CVE-2018-20050


JSON object : View

Products Affected

qacctv

  • jooan_ja-q1h_wi-fi_camera
  • jooan_ja-q1h_wi-fi_camera_firmware