CVE-2017-2223

moderate-risk
Published 2017-07-07

Cross-site request forgery (CSRF) vulnerability in TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-WRLC firmware version 1.19 and earlier and TS-WPTCAM2 firmware version 1.01 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Do I need to act?

-
0.11% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.8/10 High
NETWORK / LOW complexity

Affected Products (7)

Ts-Ptcam\/Poe Camera Firmware
Ts-Wlc2 Camera Firmware
Ts-Wptcam Camera Firmware
Ts-Ptcam Camera Firmware
Ts-Wlce Camera Firmware
Ts-Wrlc Camera Firmware
Ts-Wptcam2 Firmware

Affected Vendors

Iodata

References (6)

Patch http://www.iodata.jp/support/information/2017/camera201706/
Third Party Advisory http://www.securityfocus.com/bid/99144
Third Party Advisory https://jvn.jp/en/jp/JVN65411235/index.html
Patch http://www.iodata.jp/support/information/2017/camera201706/
Third Party Advisory http://www.securityfocus.com/bid/99144
Third Party Advisory https://jvn.jp/en/jp/JVN65411235/index.html
44
/ 100
moderate-risk
Severity 30/34 · Critical
Exploitability 0/34 · Minimal
Exposure 14/34 · Moderate