CVE-2018-17240

Katalog CVE

CVSS 7.5 · High EPSS 3,7%

Kerentanan Missing Release of Memory after Effective Lifetime pada netwavepr indoor ip camera firmware, netwavepr outdoor ip camera firmware. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcore that allows an unauthenticated attacker to exfiltrate sensitive information from the network configuration (e.g., username and password).

Rincian

Terbit di NVD

10 Juni 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime

EPSS (30 hari)

3,7% peluang dieksploitasi; lebih tinggi dari 89,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/BBge/CVE-2018-17240 advisory pihak ketiga
• https://github.com/BBge/CVE-2018-17240/blob/main/exploit.py exploit · advisory pihak ketiga
• https://www.bbge.org/file/exploit.py broken link