CVE-2017-17107

Zivif PR115-204-P-RS V2.3.4.2103 web cameras contain a hard-coded cat1029 password for the root user. The SONIX operating system's setup renders this password unchangeable and it can be used to access the device via a TELNET session.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-12-19

Last modified

2024-08-05

Weaknesses

CWE-798

Affected products

• Pr115-204-p-rs Firmware (Zivif)

References

• http://packetstormsecurity.com/files/145386/Zivif-PR115-204-P-RS-2.3.4.2103-Bypass-Command-Injection-Hardcoded-Password…
• http://seclists.org/fulldisclosure/2017/Dec/42
• https://twitter.com/silascutler/status/938052460328968192