{"id":58544,"date":"2024-07-30T18:41:14","date_gmt":"2024-07-30T15:41:14","guid":{"rendered":"https:\/\/packetstormsecurity.com\/files\/179812\/sanncesmart-dos.txt"},"modified":"2024-07-30T18:41:14","modified_gmt":"2024-07-30T15:41:14","slug":"sannce-smart-hd-wifi-security-camera-ean-2-950004-595317-denial-of-service","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/sannce-smart-hd-wifi-security-camera-ean-2-950004-595317-denial-of-service\/","title":{"rendered":"Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 Denial Of Service"},"content":{"rendered":"[Suggested description]An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices.
A crash and reboot can be triggered by crafted IP traffic, as demonstrated by the Nikto vulnerability scanner.
For example, sending the 111111 string to UDP port 20188 causes a reboot. To deny service for a long time period,
the crafted IP traffic may be sent periodically.<\/p>\n

——————————————<\/p>\n[VulnerabilityType Other]Denial of Service due to incorrect error handling<\/p>\n

——————————————<\/p>\n[Vendor of Product]Sannce<\/p>\n

——————————————<\/p>\n[Affected Product Code Base]Sannce Smart HD Wifi Security Camera – EAN nr: 2 950004 595317<\/p>\n

——————————————<\/p>\n[Affected Component]Webserver, custom UDP handling binary.<\/p>\n

——————————————<\/p>\n[Attack Type]Remote<\/p>\n

——————————————<\/p>\n[Impact Denial of Service]true<\/p>\n

——————————————<\/p>\n[Attack Vectors]Any attacker capable of reaching the device with a network packet is capable of causing a DoS.<\/p>\n

——————————————<\/p>\n[Has vendor confirmed or acknowledged the vulnerability?]true<\/p>\n

——————————————<\/p>\n[Discoverer]Willem Westerhof, Jasper Nota, Martijn Baalman from Qbit cyber security in cooperation with the Dutch Consumer organisation.<\/p>\n

——————————————<\/p>\n[Reference]https:\/\/www.sannce.com<\/p>\n

Use CVE-2019-20463.<\/p>\n","protected":false},"excerpt":{"rendered":"

[Suggested description]An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices.A crash and reboot can be triggered by crafted IP traffic, as demonstrated by the Nikto vulnerability scanner.For example, sending the 111111 string to UDP port 20188 causes a reboot. To deny service for a long time period,the crafted …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-58544","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/58544","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=58544"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/58544\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=58544"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=58544"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=58544"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}