CVE-2017-17761

An issue was discovered on Ichano AtHome IP Camera devices. The device runs the "noodles" binary - a service on port 1300 that allows a remote (LAN) unauthenticated user to run arbitrary commands. This binary requires the "system" XML element for specifying the command. For example, a <system>id</system> command results in a <system_ack>ok</system_ack> response.

BID: http://www.securityfocus.com/bid/102974
MISC: https://blogs.securiteam.com/index.php/archives/3576
CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17761

8 years
235 countries
280k users
1718k calculations
Logo sectech.co.nz
Logo www.kelcom.cz
Logo ru.kedacom.com
Logo www.elsec.cz
Logo www.eleksys.cz
Logo blog.camcloud.com