CVE-2017-8403 in 4K Camera

Riassunto

di MITRE

360fly 4K cameras allow unauthenticated Wi-Fi password changes and complete access with REST by using the Bluetooth Low Energy pairing procedure, which is available at any time and does not require a password. This affects firmware 2.1.4. Exploitation can use the 360fly Android or iOS application, or the BlueZ gatttool program.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 01/05/2017
• Divulgazione: 01/05/2017
• Moderazione: accettato
• Voce: VDB-100796
• CPE: pronto
• CWE: CWE-284 (confermato)
• CVSS: 8.8 (NVD)
• EPSS: 0.00808
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-8403
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-8403
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-8403/