CVE-2017-2223

Severity Score

8.8

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Cross-site request forgery (CSRF) vulnerability in TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-WRLC firmware version 1.19 and earlier and TS-WPTCAM2 firmware version 1.01 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Una vulnerabilidad de Cross-Site Request Forgery (CSRF) en TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-WRLC con versiones de firmware 1.19 y anteriores y TS-WPTCAM2 con versiones de firmware 1.01 y anteriores permite que atacantes remotos secuestren la autenticación de los administradores mediante vectores sin especificar.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2016-12-01 CVE Reserved
2017-07-07 CVE Published
2023-03-07 EPSS Updated
2024-08-05 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-352: Cross-Site Request Forgery (CSRF)

CAPEC

References (3)

URL	Tag	Source
http://www.securityfocus.com/bid/99144	Third Party Advisory
https://jvn.jp/en/jp/JVN65411235/index.html	Third Party Advisory

URL	Date	SRC

URL	Date	SRC
http://www.iodata.jp/support/information/2017/camera201706	2017-07-16

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Iodata Search vendor "Iodata"	Ts-wptcam Camera Firmware Search vendor "Iodata" for product "Ts-wptcam Camera Firmware"	<= 1.19 Search vendor "Iodata" for product "Ts-wptcam Camera Firmware" and version " <= 1.19"	-	Affected	in	Iodata Search vendor "Iodata"	Ts-wptcam Camera Search vendor "Iodata" for product "Ts-wptcam Camera"	-	-	Safe
Iodata Search vendor "Iodata"	Ts-ptcam Camera Firmware Search vendor "Iodata" for product "Ts-ptcam Camera Firmware"	<= 1.19 Search vendor "Iodata" for product "Ts-ptcam Camera Firmware" and version " <= 1.19"	-	Affected	in	Iodata Search vendor "Iodata"	Ts-ptcam Camera Search vendor "Iodata" for product "Ts-ptcam Camera"	-	-	Safe
Iodata Search vendor "Iodata"	Ts-ptcam\/poe Camera Firmware Search vendor "Iodata" for product "Ts-ptcam\/poe Camera Firmware"	<= 1.19 Search vendor "Iodata" for product "Ts-ptcam\/poe Camera Firmware" and version " <= 1.19"	-	Affected	in	Iodata Search vendor "Iodata"	Ts-ptcam\/poe Camera Search vendor "Iodata" for product "Ts-ptcam\/poe Camera"	-	-	Safe
Iodata Search vendor "Iodata"	Ts-wlc2 Camera Firmware Search vendor "Iodata" for product "Ts-wlc2 Camera Firmware"	<= 1.19 Search vendor "Iodata" for product "Ts-wlc2 Camera Firmware" and version " <= 1.19"	-	Affected	in	Iodata Search vendor "Iodata"	Ts-wlc2 Camera Search vendor "Iodata" for product "Ts-wlc2 Camera"	-	-	Safe
Iodata Search vendor "Iodata"	Ts-wlce Camera Firmware Search vendor "Iodata" for product "Ts-wlce Camera Firmware"	<= 1.19 Search vendor "Iodata" for product "Ts-wlce Camera Firmware" and version " <= 1.19"	-	Affected	in	Iodata Search vendor "Iodata"	Ts-wlce Camera Search vendor "Iodata" for product "Ts-wlce Camera"	-	-	Safe
Iodata Search vendor "Iodata"	Ts-wrlc Camera Firmware Search vendor "Iodata" for product "Ts-wrlc Camera Firmware"	<= 1.19 Search vendor "Iodata" for product "Ts-wrlc Camera Firmware" and version " <= 1.19"	-	Affected	in	Iodata Search vendor "Iodata"	Ts-wrlc Camera Search vendor "Iodata" for product "Ts-wrlc Camera"	-	-	Safe
Iodata Search vendor "Iodata"	Ts-wptcam2 Firmware Search vendor "Iodata" for product "Ts-wptcam2 Firmware"	<= 1.01 Search vendor "Iodata" for product "Ts-wptcam2 Firmware" and version " <= 1.01"	-	Affected	in	Iodata Search vendor "Iodata"	Ts-wptcam2 Search vendor "Iodata" for product "Ts-wptcam2"	-	-	Safe