CVE-2019-11014

{"id": "CVE-2019-11014", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2019-04-08T20:29:10.253", "references": [{"url": "http://blog.0x42424242.in/2019/03/vstarcam-investigational-security.html", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://blog.0x42424242.in/2019/03/vstarcam-investigational-security_22.html", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "The VStarCam vstc.vscam.client library and vstc.vscam shared object, as used in the Eye4 application (for Android, iOS, and Windows), do not prevent spoofing of the camera server. An attacker can create a fake camera server that listens for the client looking for a camera on the local network. When the camera responds to the client, it responds via the broadcast address, giving all information necessary to impersonate the camera. The attacker then floods the client with responses, causing the original camera to be denied service from the client, and thus causing the client to then communicate exclusively with the attacker's fake camera server. When connecting to the fake camera server, the client sends all details necessary to login to the camera (username and password)."}, {"lang": "es", "value": "La biblioteca VStarCam vstc.vscam.Client y el objeto compartido vstc.vscam, tal como se utiliza en la aplicaci\u00f3n Eye4 (para Android, iOS y Windows), no impiden la suplantaci\u00f3n del servidor de la c\u00e1mara. Un atacante puede crear un servidor de c\u00e1mara falso que esp\u00ede al cliente en busca de una c\u00e1mara en la red local. Cuando la c\u00e1mara responde al cliente, responde por medio de la direcci\u00f3n de difusi\u00f3n, dando toda la informaci\u00f3n necesaria para suplantar a la c\u00e1mara. A continuaci\u00f3n, el atacante inunda al cliente con respuestas, causando que la c\u00e1mara original presente un servicio denegado desde el cliente y, por tanto, el cliente se comunique exclusivamente con el servidor de c\u00e1mara falso del atacante. Al conectarse al servidor de c\u00e1mara falso, el cliente env\u00eda todos los detalles necesarios para iniciar sesi\u00f3n en la c\u00e1mara (nombre de usuario y contrase\u00f1a)."}], "lastModified": "2019-04-11T19:26:49.953", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:vstarcam:eye4:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "023A497B-2944-40BB-8B4D-779C2BC2A5FA"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}