Sign-up

ID

VAR-201703-1055


CVE

CVE-2017-6180


TITLE

Keekoon KK002 device HD Vulnerable to cross-site request forgery

Trust: 0.8

sources: JVNDB: JVNDB-2017-002201

DESCRIPTION

Keekoon KK002 devices 1.8.12 HD have a Cross Site Request Forgery Vulnerability affecting goform/formChnUserPwd and goform/formUserMng (and the entire set of other pages). Keekoon KK002 device HD Contains a cross-site request forgery vulnerability.Cross-site request forgery may be executed. Kaiguang KK002 is a wireless camera from Keekoon Corporation of China. An attacker could exploit the vulnerability to perform unauthorized operations

Trust: 2.25

sources: NVD: CVE-2017-6180 // JVNDB: JVNDB-2017-002201 // CNVD: CNVD-2017-03877 // VULHUB: VHN-114383

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2017-03877

AFFECTED PRODUCTS

vendor:keekoonvisionmodel:kk002 ip camerascope:eqversion:1.8.12

Trust: 2.4

vendor:keekoonvisionmodel:kk002 ip camerascope: - version: -

Trust: 0.8

vendor:keekoonmodel:kk002scope:eqversion:1.8.12

Trust: 0.6

sources: CNVD: CNVD-2017-03877 // JVNDB: JVNDB-2017-002201 // CNNVD: CNNVD-201703-530 // NVD: CVE-2017-6180

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2017-6180
value: HIGH

Trust: 1.0

NVD: CVE-2017-6180
value: HIGH

Trust: 0.8

CNVD: CNVD-2017-03877
value: MEDIUM

Trust: 0.6

CNNVD: CNNVD-201703-530
value: MEDIUM

Trust: 0.6

VULHUB: VHN-114383
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2017-6180
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

CNVD: CNVD-2017-03877
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

VULHUB: VHN-114383
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2017-6180
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 5.9
version: 3.0

Trust: 1.8

sources: CNVD: CNVD-2017-03877 // VULHUB: VHN-114383 // JVNDB: JVNDB-2017-002201 // CNNVD: CNNVD-201703-530 // NVD: CVE-2017-6180

PROBLEMTYPE DATA

problemtype:CWE-352

Trust: 1.9

sources: VULHUB: VHN-114383 // JVNDB: JVNDB-2017-002201 // NVD: CVE-2017-6180

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201703-530

TYPE

cross-site request forgery

Trust: 0.6

sources: CNNVD: CNNVD-201703-530

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2017-002201

PATCH
title:Keekoon KK002 IP Camera CSRF exploitationurl:https://hsw69.wordpress.com/2015/10/22/keekoon-kk002-ip-camera-csrf-exploitation/
Trust: 0.8
title:KeekoonKK002 cross-site request forgery vulnerability patchurl:https://www.cnvd.org.cn/patchInfo/show/91251
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2017-03877 // 
            
            
            
            JVNDB: JVNDB-2017-002201

EXTERNAL IDS
db:NVDid:CVE-2017-6180
Trust: 3.1
db:JVNDBid:JVNDB-2017-002201
Trust: 0.8
db:CNNVDid:CNNVD-201703-530
Trust: 0.7
db:CNVDid:CNVD-2017-03877
Trust: 0.6
db:VULHUBid:VHN-114383
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2017-03877 // 
            
            
            
            VULHUB: VHN-114383 // 
            
            
            
            JVNDB: JVNDB-2017-002201 // 
            
            
            
            CNNVD: CNNVD-201703-530 // 
            
            
            
            NVD: CVE-2017-6180

REFERENCES
url:https://hsw69.wordpress.com/2015/10/22/keekoon-kk002-ip-camera-csrf-exploitation/
Trust: 2.3
url:https://nvd.nist.gov/vuln/detail/cve-2017-6180
Trust: 1.4
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-6180
Trust: 0.8
sources:
            
            
            CNVD: CNVD-2017-03877 // 
            
            
            
            VULHUB: VHN-114383 // 
            
            
            
            JVNDB: JVNDB-2017-002201 // 
            
            
            
            CNNVD: CNNVD-201703-530 // 
            
            
            
            NVD: CVE-2017-6180

SOURCES
db:CNVDid:CNVD-2017-03877
db:VULHUBid:VHN-114383
db:JVNDBid:JVNDB-2017-002201
db:CNNVDid:CNNVD-201703-530
db:NVDid:CVE-2017-6180

LAST UPDATE DATE
2025-04-20T23:23:48.275000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2017-03877date:2017-04-03T00:00:00
db:VULHUBid:VHN-114383date:2017-03-14T00:00:00
db:JVNDBid:JVNDB-2017-002201date:2017-04-03T00:00:00
db:CNNVDid:CNNVD-201703-530date:2017-03-14T00:00:00
db:NVDid:CVE-2017-6180date:2025-04-20T01:37:25.860

SOURCES RELEASE DATE
db:CNVDid:CNVD-2017-03877date:2017-04-05T00:00:00
db:VULHUBid:VHN-114383date:2017-03-13T00:00:00
db:JVNDBid:JVNDB-2017-002201date:2017-04-03T00:00:00
db:CNNVDid:CNNVD-201703-530date:2017-03-14T00:00:00
db:NVDid:CVE-2017-6180date:2017-03-13T06:59:00.543