CVE-2017-15236 Information

Share on:

Feb 14, 2021 cve

Description

Tiandy IP cameras 5.56.17.120 do not properly restrict a certain proprietary protocol which allows remote attackers to read settings via a crafted request to TCP port 3001 as demonstrated by config* files and extendword.txt.

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Reference

https://blogs.securiteam.com/index.php/archives/3444

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

NONE

Base Score

NONE

Base Severity

7.5