CVE-2017-16566 | BDVDB-2026-93093 Detail

Description#

On Jooan IP Camera A5 2.3.36 devices, an insecure FTP server does not require authentication, which allows remote attackers to read or replace core system files including those used for authentication (such as passwd and shadow). This can be abused to take full root level control of the device.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://siggyd.github.io/Advisories/CVE-2017-16566

Exploit#

No public exploit known

History#

Version 12017-11-17Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.