CVE-2018-6407

{"id": "CVE-2018-6407", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2018-01-30T21:29:00.447", "references": [{"url": "https://github.com/dreadlocked/ConceptronicIPCam_MultipleVulnerabilities/", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/dreadlocked/ConceptronicIPCam_MultipleVulnerabilities/", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered on Conceptronic CIPCAMPTIWL V3 0.61.30.21 devices. An unauthenticated attacker can crash a device by sending a POST request with a huge body size to /hy-cgi/devices.cgi?cmd=searchlandevice. The crash completely freezes the device."}, {"lang": "es", "value": "Se ha descubierto un problema en dispositivos Conceptronic CIPCAMPTIWL V3 0.61.30.21. Un atacante no autenticado puede provocar el cierre inesperado de un dispositivo mediante el env\u00edo de una petici\u00f3n POST con un gran tama\u00f1o de cuerpo a /hy-cgi/devices.cgi?cmd=searchlandevice. El cierre inesperado bloquea completamente el dispositivo."}], "lastModified": "2024-11-21T04:10:39.120", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:conceptronic:cipcamptiwl_firmware:00.30.01.0047p3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8C4186D5-370B-4314-9A0E-CE33F555E06C"}, {"criteria": "cpe:2.3:o:conceptronic:cipcamptiwl_web_firmware:0.61.30.21:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1CDB1816-B9A6-44D4-8B2F-0CB2B968C2B4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:conceptronic:cipcamptiwl:3:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BD27F14B-17BC-4499-883F-EF75E13CCA33"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}