CVE-2017-8221

High

Published: 25/04/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

WIFICAM (P2P) devices use a cleartext UDP tunneling protocol for communication between an Android application and the camera, allowing remote attackers to obtain sensitive information by sniffing the network.

Risk Assessment

Attackers can gain access to confidential data, posing a serious threat to user privacy and system security.

Recommendation

It is recommended to implement encryption for communication and to monitor network traffic for unauthorized access attempts.

Other vulnerabilities in WIFICAM (P2P) devices

CVE-2017-8222High
WIFICAM (P2P) devices have a private RSA key and 'Apple Production IOS Push Services' certificate stored in the firmware at /system/www/pem/ck.pem, allowing attackers to obtain sensitive information.

Original NVD description (English source)

Wireless IP Camera (P2P) WIFICAM devices rely on a cleartext UDP tunnel protocol (aka the Cloud feature) for communication between an Android application and a camera device, which allows remote attackers to obtain sensitive information by sniffing the network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS