VULNERABILITY INTELLIGENCE

CVE-2018-13114

CVSS score9.8 CRITICAL

EPSS probability1.90%

CISA KEVNot currently listed

Published2018-10-22

Last modified2026-06-17

Description

Missing authentication and improper input validation in KERUI Wifi Endoscope Camera (YPC99) allow an attacker to execute arbitrary commands (with a length limit of 19 characters) via the "ssid" value, as demonstrated by ssid:;ping 192.168.1.2 in the body of a SETSSID command.