HIGH

CVE-2019-6973

CVSS v3

7.5

HIGH

EPSS Score

12.5%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.x) is configured for an iterative queueing approach (aka non-threaded operation) with a timeout of several seconds.

Technical details

Published
3/21/2019
Exploit-DB
EDB-46261

Frequently asked questions

What is CVE-2019-6973?

Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.x) is configured for an iterative queueing approach (aka non-threaded operation) with a timeout of several seconds.

Is CVE-2019-6973 actively exploited?

Active exploitation of CVE-2019-6973 has not been confirmed. The EPSS score is 12.5%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2019-6973?

CVE-2019-6973 has a CVSS v3 base score of 7.5 (HIGH severity).

Is CVE-2019-6973 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.