ZIVIF PR115-204-P-RS
Approved changes feed: RSS · Atom
cpe:2.3:h:zivif:pr115-204-p-rs:-:*:*:*:*:*:*:*part: h version: - update: *
| Vendor | Zivif (33a832c4-4801-5e21-ab4e-de84ddbcddd1) |
|---|---|
| Product | Pr115 204 P Rs (13c31141-e28e-559f-98b2-d4a04a0a18d9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-17107 |
not_vulnerable | 2026-06-08 05:09:07.920770 |
Details available
Zivif PR115-204-P-RS V2.3.4.2103 web cameras contain a hard-coded cat1029 password for the root user. The SONIX operating system's setup renders this password unchangeable and it can be used to access the device via a TELNET session.
Published: 2017-12-18T17:00:00.000Z
Updated: 2024-08-05T20:43:59.790Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-17106 |
not_vulnerable | 2026-06-08 05:09:07.920392 |
Details available
Credentials for Zivif PR115-204-P-RS V2.3.4.2103 Webcams can be obtained by an unauthenticated remote attacker using a standard web /cgi-bin/hi3510/param.cgi?cmd=getuser HTTP request. This vulnerability exists because of a lack of authentication checks in requests to CGI pages.
Published: 2017-12-18T17:00:00.000Z
Updated: 2024-08-05T20:43:59.658Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-17105 |
not_vulnerable | 2026-06-08 05:09:07.919918 |
Details available
Zivif PR115-204-P-RS V2.3.4.2103 and V4.7.4.2121 (and possibly in-between versions) web cameras are vulnerable to unauthenticated, blind remote command injection via CGI scripts used as part of the web interface, as demonstrated by a cgi-bin/iptest.cgi?cmd=iptest.cgi&-time="1504225666237"&-url=$(reboot) request.
Published: 2017-12-18T17:00:00.000Z
Updated: 2024-08-05T20:43:59.837Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.