CVE-2017-17761
CriticalSummary
An issue was discovered on Ichano AtHome IP Camera devices that allows a remote, unauthenticated user on the LAN to execute arbitrary commands. This is done through the 'noodles' binary running on port 1300, which requires the <system> XML element to specify the command.
Risk Assessment
This vulnerability poses a significant security risk by allowing attackers to remotely execute commands on the devices, potentially leading to full control over them.
Recommendation
It is recommended to update the firmware of Ichano AtHome IP Camera devices and restrict access to port 1300 to trusted users only.
Original NVD description (English source)
An issue was discovered on Ichano AtHome IP Camera devices. The device runs the "noodles" binary - a service on port 1300 that allows a remote (LAN) unauthenticated user to run arbitrary commands. This binary requires the "system" XML element for specifying the command. For example, a <system>id</system> command results in a <system_ack>ok</system_ack> response.