critical9.8Public exploit code
CVE-2017-17761
An issue was discovered on Ichano AtHome IP Camera devices.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ichano AtHome IP Cameras - Multiple Vulnerabilities2017-12-19 · remote · hardware
Impact
An issue was discovered on Ichano AtHome IP Camera devices. The device runs the "noodles" binary - a service on port 1300 that allows a remote (LAN) unauthenticated user to run arbitrary commands. This binary requires the "system" XML element for specifying the command. For example, a <system>id</system> command results in a <system_ack>ok</system_ack> response.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ichano | Athome Ip Camera Firmware | All versions |