What’s Vulnerable › Vulnerabilities

CVE-2019-6973

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 13.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-03-21 · updated 2026-06-17

Description

Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.x) is configured for an iterative queueing approach (aka non-threaded operation) with a timeout of several seconds.

Affected products

• Genivia gSOAP: 2.8.0

References

• http://packetstormsecurity.com/files/151377/Sricam-gSOAP-2.8-Denial-Of-Service.html
• https://github.com/bitfu/sricam-gsoap2.8-dos-exploit
• https://www.exploit-db.com/exploits/46261/
• http://packetstormsecurity.com/files/151377/Sricam-gSOAP-2.8-Denial-Of-Service.html
• https://github.com/bitfu/sricam-gsoap2.8-dos-exploit
• https://www.exploit-db.com/exploits/46261/

Get alerted when CVE-2019-6973 or the next vulnerability affects your stack