CVE-2021-40149

The web server of the E1 Zoom camera through 3.0.0.716 discloses its SSL private key via the root web server directory

published July 17, 2022

CVSS
—
EPSS
8%
Percentile
94.9
In the wild
Unconfirmed
What it is

The web server of the E1 Zoom camera through 3.0.0.716 discloses its SSL private key via the root web server directory. In this way an attacker can download the entire key via the /self.key URI.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08298 · 94.9th percentile
Published
2022-07-17T21:36Z
EPSS history
Timeline
  • 17 JUL 21:36Z
    The web server of the E1 Zoom camera through 3.0.0.716 discloses its SSL private key via the root web server directory
    cvelistv5