CVE-2017-14743

Faleemi FSC-880 00.01.01.0048P2 devices allow unauthenticated SQL injection via the Username element in an XML document to /onvif/device_service, as…

published September 26, 2017

CVSS
—
EPSS
1%
Percentile
68.3
In the wild
Unconfirmed
What it is

Faleemi FSC-880 00.01.01.0048P2 devices allow unauthenticated SQL injection via the Username element in an XML document to /onvif/device_service, as demonstrated by reading the admin password.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01219 · 68.3th percentile
Published
2017-09-26T06:00Z
EPSS history
Timeline
  • 26 SEP 06:00Z
    Faleemi FSC-880 00.01.01.0048P2 devices allow unauthenticated SQL injection via the Username element in an XML document to /onvif/device_service, as…
    cvelistv5