Unscored CVE-2018-20050 EUVD-2018-12627GHSA-5mqh-4pq7-mjfx

Mishandling of an empty string on the Jooan JA-Q1H Wi-Fi camera with firmware 21.0.0.91 allows remote attackers to cause a denial of servic…

Published Dec 10, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

Mishandling of an empty string on the Jooan JA-Q1H Wi-Fi camera with firmware 21.0.0.91 allows remote attackers to cause a denial of service (crash and reboot) via the ONVIF GetStreamUri method and GetVideoEncoderConfigurationOptions method.

References

https://github.com/iamweifan/jooan/blob/master/es_poc.py