CVE-2017-16566

9.8 criticalEPSS 2.6%

Critical (9.8) in qacctv jooan a5 ip camera firmware. EPSS 2.6% chance of exploitation in the next 30 days.

On Jooan IP Camera A5 2.3.36 devices, an insecure FTP server does not require authentication, which allows remote attackers to read or replace core system files including those used for authentication (such as passwd and shadow). This can be abused to take full root level control of the device.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2017-11-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

qacctv:jooan_a5_ip_camera_firmware

References

https://siggyd.github.io/Advisories/CVE-2017-16566
https://siggyd.github.io/Advisories/CVE-2017-16566

Check your stack JSON