CVE-2017-8225

Published: Apr 25, 2017Modified: May 13, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

On Wireless IP Camera (P2P) WIFICAM devices, access to .ini files (containing credentials) is not correctly checked. An attacker can bypass authentication by providing an empty loginuse parameter and an empty loginpas parameter in the URI.

Affected (1)

Products: Wificam: Wireless Ip Camera (p2p) Firmware

Wificam

1 product

Wireless Ip Camera (p2p) Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wificam Wireless Ip Camera (p2p) Firmware	All versions

Running on/with	Platform Versions
Wificam Wireless Ip Camera (p2p)	All versions

Related CWEs

CWE-522

Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (4)

http://seclists.org/fulldisclosure/2017/Mar/23

Source: cve@mitre.org

ExploitMailing ListThird Party Advisory

https://pierrekim.github.io/blog/2017-03-08-camera-goahead-0day.html#pre-auth-info-leak-goahead

Source: cve@mitre.org

ExploitThird Party Advisory

http://seclists.org/fulldisclosure/2017/Mar/23

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitMailing ListThird Party Advisory

https://pierrekim.github.io/blog/2017-03-08-camera-goahead-0day.html#pre-auth-info-leak-goahead

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.