CVE-2019-6973
Last modified
CVE-2019-6973 is a vulnerability of currently unknown severity. Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.x) is configured for an iterative queueing approach (aka non-threaded operation) with a timeout of several seconds.. EPSS estimates a 13.78% chance of exploitation in the next 30 days.
Description
Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.x) is configured for an iterative queueing approach (aka non-threaded operation) with a timeout of several seconds.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Genivia | Gsoap | 2.8.0 |
References
- http://packetstormsecurity.com/files/151377/Sricam-gSOAP-2.8-Denial-Of-Service.htmlExploit, Third Party Advisory, VDB Entry
- https://github.com/bitfu/sricam-gsoap2.8-dos-exploitThird Party Advisory
- https://www.exploit-db.com/exploits/46261/Exploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/151377/Sricam-gSOAP-2.8-Denial-Of-Service.htmlExploit, Third Party Advisory, VDB Entry
- https://github.com/bitfu/sricam-gsoap2.8-dos-exploitThird Party Advisory
- https://www.exploit-db.com/exploits/46261/Exploit, Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-6973?
How severe is CVE-2019-6973?
How do I fix CVE-2019-6973?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-6967AirTies Air5341 1.0.0.12 devices allow cgi-bin/login CSRF.
- CVE-2019-6968The web interface of the D-Link DVA-5592 20180823 is vulnera…6.1
- CVE-2019-6969The web interface of the D-Link DVA-5592 20180823 is vulnera…7.5
- CVE-2019-6970Moodle 3.5.x before 3.5.4 allows SSRF.
- CVE-2019-6971An issue was discovered on TP-Link TL-WR1043ND V2 devices. A…
- CVE-2019-6972An issue was discovered on TP-Link TL-WR1043ND V2 devices. T…
- CVE-2019-6974In the Linux kernel before 4.20.8, kvm_ioctl_create_device i…8.1
- CVE-2019-6975Django 1.11.x before 1.11.19, 2.0.x before 2.0.11, and 2.1.x…
- CVE-2019-6976libvips before 8.7.4 generates output images from uninitiali…
- CVE-2019-6977gdImageColorMatch in gd_color_match.c in the GD Graphics Lib…
- CVE-2019-6978The GD Graphics Library (aka LibGD) 2.2.5 has a double free …
- CVE-2019-6979An issue was discovered in the User IP History Logs (aka IP_…
Are you affected by CVE-2019-6973?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
