CVE-2019-6973

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.x) is configured for an iterative queueing approach (aka non-threaded operation) with a timeout of several seconds.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/151377/Sricam-gSOAP-2.8-Denial-Of-Service.htmlExploit, Third Party Advisory, VDB Entry
https://github.com/bitfu/sricam-gsoap2.8-dos-exploitThird Party Advisory
https://www.exploit-db.com/exploits/46261/Exploit, Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/151377/Sricam-gSOAP-2.8-Denial-Of-Service.htmlExploit, Third Party Advisory, VDB Entry
https://github.com/bitfu/sricam-gsoap2.8-dos-exploitThird Party Advisory
https://www.exploit-db.com/exploits/46261/Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Mar 21, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-69748.1In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition,CVE-2019-69757.5Django 1.11.x before 1.11.19, 2.0.x before 2.0.11, and 2.1.x before 2.1.6 allows Uncontrolled Memory Consumption via a malicious attacker-su CVE-2019-69765.3libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/CVE-2019-69778.8gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.CVE-2019-69789.8The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c. NOTE: CVE-2019-69796.1An issue was discovered in the User IP History Logs (aka IP_History_Logs) plugin 1.0.2 for MyBB. There is XSS via the admin/modules/tools/ip CVE-2019-69809.8Synacor Zimbra Collaboration Suite 8.7.x through 8.8.11 allows insecure object deserialization in the IMAP component.CVE-2019-69816.5Zimbra Collaboration Suite 8.7.x through 8.8.11 allows Blind SSRF in the Feed component.CVE-2019-69825.5An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF. The application could encounter an Out-o CVE-2019-69836.5An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF. The application could encounter an Integ CVE-2019-69846.5An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF. The application could encounter a Use-Af CVE-2019-69858.8An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF. The application could encounter an Out-o