CVE-2017-8222

High

Published: 25/04/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

WIFICAM (P2P) devices have a private RSA key and 'Apple Production IOS Push Services' certificate stored in the firmware at /system/www/pem/ck.pem, allowing attackers to obtain sensitive information.

Risk Assessment

Exploitation of this vulnerability may lead to the disclosure of confidential data, posing a serious threat to user security and privacy.

Recommendation

It is recommended to update the firmware of WIFICAM devices and remove sensitive data from system files to minimize risk.

Other vulnerabilities in WIFICAM (P2P) devices

CVE-2017-8221High
WIFICAM (P2P) devices use a cleartext UDP tunneling protocol for communication between an Android application and the camera, allowing remote attackers to obtain sensitive information by sniffing the network.

Original NVD description (English source)

Wireless IP Camera (P2P) WIFICAM devices have an "Apple Production IOS Push Services" private RSA key and certificate stored in /system/www/pem/ck.pem inside the firmware, which allows attackers to obtain sensitive information.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS