High severity · published Jun 18, 2021
CVE-2021-33818
An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67
7.5
CVSS
1.9%
EPSS
No
On KEV
Description
An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67. Attackers can use slowhttptest tool to send incomplete HTTP request, which could make server keep waiting for the packet to finish the connection, until its resource exhausted. Then the web server is denial-of-service.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CG
Camera G3 Flex Firmware · UI
uvc.v4.30.0.67 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-33818
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-33818
Exploit
https://github.com/Jian-Xian/CVE-POC/blob/master/CVE-2021-33818.md
Third Party Advisory
https://github.com/shekyan/slowhttptest
Product
https://store.ui.com/collections/unifi-protect-cameras/products/unifi-video-g3-flex-camera
More from Camera G3 Flex Firmware
7.5
CVE-2021-33820
An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67.Attacker could send a huge amount of TCP SYN packet to make web service's resource exhausted