Zivif PR115-204-P-RS 2.3.4.2103 Password hard-coded credentials

Summaryinfo

A vulnerability was found in Zivif PR115-204-P-RS 2.3.4.2103 and classified as critical. This affects an unknown function. Executing a manipulation of the argument Password with the input cat1029 can lead to hard-coded credentials. This vulnerability is registered as CVE-2017-17107. It is possible to launch the attack remotely. No exploit is available. The application of restrictive firewalling is recommended.

Detailsinfo

A vulnerability classified as very critical was found in Zivif PR115-204-P-RS 2.3.4.2103. This vulnerability affects an unknown code. The manipulation of the argument Password with the input value cat1029 leads to a hard-coded credentials vulnerability. The CWE definition for the vulnerability is CWE-798. The product contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

Zivif PR115-204-P-RS V2.3.4.2103 web cameras contain a hard-coded cat1029 password for the root user. The SONIX operating system's setup renders this password unchangeable and it can be used to access the device via a TELNET session.

The bug was discovered 12/10/2017. The weakness was published 12/19/2017 as not defined mailinglist post (Full-Disclosure). The advisory is shared for download at seclists.org. This vulnerability was named CVE-2017-17107 since 12/03/2017. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. There are known technical details, but no exploit is available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 01/18/2023). The MITRE ATT&CK project declares the attack technique as T1110.001.

The vulnerability was handled as a non-public zero-day exploit for at least 8 days. During that time the estimated underground price was around $0-$5k.

Proper firewalling of is able to address this issue.

Similar entries are available at VDB-110798 and VDB-110799. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• Zivif

Name

• PR115-204-P-RS

Version

• 2.3.4.2103

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion