CVE-2017-17105

CVSS 3.0: 9.8 critical
EPSS: 85%p100
Published: Dec 19, 2017 · Dec 19, 2017
Modified: Jun 17, 2026

Analyze CVE-2017-17105 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Zivif PR115-204-P-RS V2.3.4.2103 and V4.7.4.2121 (and possibly in-between versions) web cameras are vulnerable to unauthenticated, blind remote command injection via CGI scripts used as part of the web interface, as demonstrated by a cgi-bin/iptest.cgi?cmd=iptest.cgi&-time="1504225666237"&-url=$(reboot) request.

Vendors: zivif

Products: pr115-204-p-rs firmware

Weakness: CWE-78

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (84.6%)

In the news

2 stories

Zerobot Botnet Emerges as a Growing Threat with New Exploits and Capabilities

The Hacker NewsJul 26, 17:38 UTC · Jul 26, 2023MalwareCVE-2021-42013 CVE-2022-33891 CVE-2017-17105+41 · 1 read

A new Zerobot variant spreads by exploiting Apache flaws

Security AffairsJul 10, 22:18 UTC · Jul 10, 2023VulnerabilityCVE-2021-42013 CVE-2022-33891 CVE-2017-17105+11