CVE-2017-17106

Critical

Published: 19/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2017-17106 allows unauthenticated remote attackers to obtain credentials for Zivif PR115-204-P-RS V2.3.4.2103 webcams via a standard HTTP request. The vulnerability exists due to a lack of authentication checks in requests to CGI pages.

Risk Assessment

The organization may be exposed to unauthorized access to webcams, potentially leading to privacy and security breaches. Attackers could leverage the obtained credentials for further malicious activities.

Recommendation

It is recommended to implement proper authentication mechanisms for all requests to CGI pages and to update the webcam firmware to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Credentials for Zivif PR115-204-P-RS V2.3.4.2103 Webcams can be obtained by an unauthenticated remote attacker using a standard web /cgi-bin/hi3510/param.cgi?cmd=getuser HTTP request. This vulnerability exists because of a lack of authentication checks in requests to CGI pages.