CVE-2019-6973: High severity genivia gsoap vulnerability
Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.x) is configured for an iterative queueing approach (aka non-threaded operation) with a timeout of several seconds.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-6973?
CVE-2019-6973 is a vulnerability that affects Sricam IP CCTV cameras, allowing attackers to perform a denial of service attack through multiple incomplete HTTP requests.
How does CVE-2019-6973 work?
CVE-2019-6973 exploits the configuration of the web server (based on gSOAP 2.8.x) used by Sricam IP CCTV cameras, which is configured for an iterative queueing approach with a timeout of several seconds. Attackers can send multiple incomplete HTTP requests to overwhelm the server and cause a denial of service.
What is the severity of CVE-2019-6973?
CVE-2019-6973 has a severity rating of 7.5 (High).
Which software is affected by CVE-2019-6973?
The vulnerability affects Sricam IP CCTV cameras with the following software: Genivia gSOAP 2.8.0.
How can I mitigate or fix CVE-2019-6973?
To mitigate CVE-2019-6973, it is recommended to update the firmware of the Sricam IP CCTV cameras with the latest patches provided by the manufacturer.