CVE-2017-8225

PoC ×2—

CVSS 3.0

9.8 critical

EPSS

35%p98

Published

Apr 25, 2017 (Apr 25, 2017)

Modified

Jun 17, 2026

Description

On Wireless IP Camera (P2P) WIFICAM devices, access to .ini files (containing credentials) is not correctly checked. An attacker can bypass authentication by providing an empty loginuse parameter and an empty loginpas parameter in the URI.

Vendors: wificam
Products: wireless ip camera \(p2p\) firmware
Weakness: CWE-522
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (35.4%)

In the news4 stories

Researchers warn of 'vast' new IoT botnet

CyberScoopOct 20, 21:15 UTC · Oct 20, 2017Malware in the wildCVE-2017-8225

Hack the hackers. Watch out the NEW IPCAM EXPLOIT, it is a scam!

Security AffairsNov 15, 18:45 UTC · Nov 15, 2017Phishing & fraud CVE-2017-8225

Hacker Distributes Backdoored IoT Vulnerability Scanning Script to Hack Script Kiddies

The Hacker NewsNov 9, 07:03 UTC · Nov 9, 2017Vulnerability CVE-2017-8225

A new Mirai-Like IoT Botnet is growing in a new mysterious campaign

Security AffairsOct 20, 16:58 UTC · Oct 20, 2017Malware CVE-2017-8225