How severe is CVE-2017-17101?

CVE-2017-17101 has a CVSS 3.x base score of 9.8, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.

Is CVE-2017-17101 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (72nd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2017-17101?

CVE-2017-17101 affects Apexis Apm-h803-mpc Firmware. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2017-17101?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2017-17101 published?

CVE-2017-17101 was published on 2018-02-19 and last updated on 2026-06-17.

CVE-2017-17101

CVE-2017-17101 is a critical-severity vulnerability in Apexis Apm-h803-mpc Firmware with a CVSS 3.x base score of 9.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Critical (CVSS 3.x base score 9.8)
CVSS v2: 7.5
EPSS exploit prediction: 2% (72nd percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Apexis Apm-h803-mpc Firmware
Published: 2018-02-19
Last modified: 2026-06-17

Description

An issue was discovered in Apexis APM-H803-MPC software, as used with many different models of IP Camera. An unprotected CGI method inside the web application permits an unauthenticated user to bypass the login screen and access the webcam contents including: live video stream, configuration files with all the passwords, system information, and much more. With this vulnerability, anyone can access to a vulnerable webcam with 'super admin' privilege.

Frequently asked questions

What is CVE-2017-17101?: An issue was discovered in Apexis APM-H803-MPC software, as used with many different models of IP Camera. An unprotected CGI method inside the web application permits an unauthenticated user to bypass the login screen and access the webcam contents including: live video stream, configuration files with all the passwords, system information, and much more. With this vulnerability, anyone can access to a vulnerable webcam with 'super admin' privilege.
How severe is CVE-2017-17101?: CVE-2017-17101 has a CVSS 3.x base score of 9.8, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
Is CVE-2017-17101 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (72nd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2017-17101?: CVE-2017-17101 affects Apexis Apm-h803-mpc Firmware. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2017-17101?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
When was CVE-2017-17101 published?: CVE-2017-17101 was published on 2018-02-19 and last updated on 2026-06-17.

References

https://youtu.be/B75C13Zw35Y

Affected products (1)

cpe:2.3:o:apexis:apm-h803-mpc_firmware:1.1.2.69:*:*:*:*:*:*:*