CVSS 3.0
7.5 highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2019-6973
High (7.5) in genivia gsoap. EPSS 14% chance of exploitation in the next 30 days.
Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.x) is configured for an iterative queueing approach (aka non-threaded operation) with a timeout of several seconds.
Severity
- EPSS
- 14% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- genivia:gsoap
References
- http://packetstormsecurity.com/files/151377/Sricam-gSOAP-2.8-Denial-Of-Service.html
- https://github.com/bitfu/sricam-gsoap2.8-dos-exploit
- https://www.exploit-db.com/exploits/46261/
- http://packetstormsecurity.com/files/151377/Sricam-gSOAP-2.8-Denial-Of-Service.html
- https://github.com/bitfu/sricam-gsoap2.8-dos-exploit