CVE-2018-13114

PoC —

CVSS 3.0

9.8 critical

EPSS

2%p78

Published

Oct 22, 2018 (Oct 22, 2018)

Modified

Jun 17, 2026

Description

Missing authentication and improper input validation in KERUI Wifi Endoscope Camera (YPC99) allow an attacker to execute arbitrary commands (with a length limit of 19 characters) via the "ssid" value, as demonstrated by ssid:;ping 192.168.1.2 in the body of a SETSSID command.

Vendors: keruigroup
Products: ypc99 firmware
Weakness: CWE-306
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.9%)

In the news0 stories

No ingested article mentions this CVE yet.