CVE-2018-6407

An issue was discovered on Conceptronic CIPCAMPTIWL V3 0.61.30.21 devices. An unauthenticated attacker can crash a device by sending a POST request with a huge body size to /hy-cgi/devices.cgi?cmd=searchlandevice. The crash completely freezes the device.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2018-01-30

Last modified

2024-09-16

Weaknesses

CWE-20

Affected products

• Cipcamptiwl Firmware (Conceptronic)
• Cipcamptiwl Web Firmware (Conceptronic)

References

• https://github.com/dreadlocked/ConceptronicIPCam_MultipleVulnerabilities/