CVE-2021-43517 - OpenCVE

FOSCAM Camera FI9805E with firmware V4.02.R12.00018510.10012.143900.00000 contains a backdoor that opens Telnet port when special command is sent on port 9530.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

AV:N/AC:L/Au:N/C:C/I:C/A:C

Vendors & Products
CPE Configurations

Vendors	Products
Foscam	Fi9805e Firmware Fi9805e

Configuration 1 [-]

AND

cpe:2.3:o:foscam:fi9805e_firmware:4.02.r12.00018510.10012.143900.00000:*:*:*:*:*:*:*

cpe:2.3:h:foscam:fi9805e:-:*:*:*:*:*:*:*

References

Link	Resource
https://habr.com/ru/post/486856/	Exploit Third Party Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2022-04-08T16:11:00

Updated: 2022-04-08T16:11:00

Reserved: 2021-11-08T00:00:00

Link: CVE-2021-43517

JSON object: View

NVD Information

Status : Analyzed

Published: 2022-04-08T17:15:08.627

Modified: 2022-04-15T14:53:45.597

Link: CVE-2021-43517

JSON object: View

Redhat Information

No data.

CWE

NVD-CWE-noinfo

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:foscam:fi9805e_firmware:4.02.r12.00018510.10012.143900.00000:*:*:*:*:*:*:*", "matchCriteriaId": "408AE98B-09E5-4243-97B4-425F941BB55D", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:foscam:fi9805e:-:*:*:*:*:*:*:*", "matchCriteriaId": "D7A336D4-B6F0-4609-AB74-C83D1C155B44", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "FOSCAM Camera FI9805E with firmware V4.02.R12.00018510.10012.143900.00000 contains a backdoor that opens Telnet port when special command is sent on port 9530."}, {"lang": "es", "value": "La c\u00e1mara FOSCAM FI9805E con firmware versi\u00f3n V4.02.R12.00018510.10012.143900.00000, contiene una puerta trasera que abre el puerto Telnet cuando es enviado un comando especial en el puerto 9530"}], "id": "CVE-2021-43517", "lastModified": "2022-04-15T14:53:45.597", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-04-08T17:15:08.627", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://habr.com/ru/post/486856/"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}