CVE-2017-8225

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

On Wireless IP Camera (P2P) WIFICAM devices, access to .ini files (containing credentials) is not correctly checked. An attacker can bypass authentication by providing an empty loginuse parameter and an empty loginpas parameter in the URI.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-522

Affected software

No affected versions have been published.

Timeline

Published: Apr 25, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-82269.8Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have default credentials that are hardcoded in the firmware and can be extracted by anyon CVE-2017-82279.8Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have a timeout policy to wait for 5 minutes in case 30 incorrect password attempts are de CVE-2017-82288.8Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices mishandle reboots within the past two hours. Amcrest cloud services does not perform a th CVE-2017-82299.8Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to download the administrative credentials. If the firm CVE-2017-82308.8On Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices, the users on the device are divided into 2 groups "admin" and "user". However, as a p CVE-2017-82337.8In a camera driver function in all Android releases from CAF using the Linux kernel, a bounds check is missing when writing into an array po CVE-2017-82347.8In all Android releases from CAF using the Linux kernel, an out of bounds access can potentially occur in a camera function.CVE-2017-82355.5In all Android releases from CAF using the Linux kernel, a memory structure in a camera driver is not properly protected.CVE-2017-82367.8In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in an IPA driver.CVE-2017-82377.8In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists while loading a firmware image.CVE-2017-82387.8In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a camera function.CVE-2017-82395.5In all Android releases from CAF using the Linux kernel, userspace-controlled parameters for flash initialization are not sanitized potentia