CVE-2018-17240 PoC — Netwave IP camera 安全漏洞

Source

https://github.com/FenrirSec/CVE-2018-17240_exploit

Associated Vulnerability

Title:Netwave IP camera 安全漏洞 (CVE-2018-17240)
Description:There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcore that allows an unauthenticated attacker to exfiltrate sensitive information from the network configuration (e.g., username and password).

Description

Bash exploit for the CVE-2018-17240 (Netwave Cameras Memory Leak)

Readme

# CVE-2018-17240_exploit
Bash exploit for the CVE-2018-17240 (Netwave Cameras Memory Leak)

Run this exploit on a vulnerable Netwave Camera in order
to dump the camera's network configuration and credentials.

The credentials "Possible Username" and "Possible Password" can be used to login onto the web interface.

`Usage : bash exploit.sh host port`

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!