Beveiligingsadvies

CVE-2017-5674

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2017-03-13 06:14:00
Laatst bijgewerkt 2024-08-05 15:11:48
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker to craft a malformed HTTP ("GET system.ini HTTP/1.1\n\n" - note the lack of "/" in the path field of the request) request that will disclose the configuration file with the login password.