CVE-2017-8227
First published: Wed Jul 03 2019(Updated: )
Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have a timeout policy to wait for 5 minutes in case 30 incorrect password attempts are detected using the Web and HTTP API interface provided by the device. However, if the same brute force attempt is performed using the ONVIF specification (which is supported by the same binary) then there is no account lockout or timeout executed. This can allow an attacker to circumvent the account protection mechanism and brute force the credentials. If the firmware version V2.420.AC00.16.R 9/9/2016 is dissected using binwalk tool, one obtains a _user-x.squashfs.img.extracted archive which contains the filesystem set up on the device that many of the binaries in the /usr folder. The binary "sonia" is the one that has the vulnerable function that performs the credential check in the binary for the ONVIF specification. If one opens this binary in IDA-pro one will notice that this follows a ARM little endian format. The function at address 00671618 in IDA pro is parses the WSSE security token header. The sub_ 603D8 then performs the authentication check and if it is incorrect passes to the function sub_59F4C which prints the value "Sender not authorized."
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Amcrest Ipm-721s Firmware | <=2.420.ac00.16.r.20160909 | |
| Amcrest IPM-721S |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-8227?
The severity of CVE-2017-8227 is critical with a score of 9.8.
How does CVE-2017-8227 affect Amcrest IPM-721S devices?
CVE-2017-8227 affects Amcrest IPM-721S devices with firmware version 2.420.AC00.16.R.20160909.
What is the vulnerability description of CVE-2017-8227?
CVE-2017-8227 is a vulnerability in the timeout policy of Amcrest IPM-721S devices, allowing for brute force password attempts using the ONVIF specification.
How can I exploit CVE-2017-8227?
I'm sorry, but I cannot provide information or support on exploiting vulnerabilities.
How can I mitigate CVE-2017-8227?
To mitigate CVE-2017-8227, it is recommended to update the firmware of Amcrest IPM-721S devices to a version that addresses the vulnerability.
- collector/nvd-index
- vendor/amcrest
- product/ipm-721s firmware
- canonical/amcrest ipm-721s firmware
- product/ipm-721s
- canonical/amcrest ipm-721s