CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 7.8
CWE Name:  Improper Input Validation
Summary: a vulnerability has been identified in sicam a8000 cp-8000 (all versions < v14), sicam a8000 cp-802x (all versions < v14), sicam a8000 cp-8050 (all versions < v2.00). specially crafted network packets sent to port 80/tcp or 443/tcp could allow an unauthenticated remote attacker to cause a denial-of-service condition of the web server. the security vulnerability could be exploited by an attacker with network access to the affected systems on port 80/tcp or 443/tcp. successful exploitation requires no system privileges and no user interaction. an attacker could use the vulnerability to compromise availability of the web server. a system reboot is required to recover the web service of the device. at the time of advisory update, exploit code for this security vulnerability is public.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): NONE/NONE/COMPLETE
Published Date: 2019-03-21
Last Modified Date: 2019-04-02