Shekar Endoscope WiFi information disclosure

Summaryinfo

A vulnerability was found in Shekar Endoscope and classified as critical. Affected by this vulnerability is an unknown functionality of the component WiFi Handler. Such manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2017-10719. The attack can only be initiated within the local network. No exploit exists.

Detailsinfo

A vulnerability, which was classified as critical, has been found in Shekar Endoscope (the affected version is unknown). Affected by this issue is an unknown code of the component WiFi Handler. The manipulation with an unknown input leads to a information disclosure vulnerability. Using CWE to declare the problem leads to CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. Impacted is confidentiality, integrity, and availability. CVE summarizes:

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the device has default Wi-Fi credentials that are exactly the same for every device. This device acts as an Endoscope camera that allows its users to use it in various industrial systems and settings, car garages, and also in some cases in the medical clinics to get access to areas that are difficult for a human being to reach. Any breach of this system can allow an attacker to get access to video feed and pictures viewed by that user and might allow them to get a foot hold in air gapped networks especially in case of nation critical infrastructure/industries.

The weakness was disclosed 06/17/2019 as not defined mailinglist post (Bugtraq). The advisory is shared for download at seclists.org. This vulnerability is handled as CVE-2017-10719 since 07/01/2017. The attack needs to be initiated within the local network. No form of authentication is required for exploitation. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1592.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The entries VDB-136204, VDB-136205, VDB-136206 and VDB-136207 are pretty similar. Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• Shekar

Name

• Endoscope

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion