CVE-2017-8228

CVE-2017-8228 describes a critical vulnerability in Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices, where insufficient verification in Amcrest cloud services allows an attacker to add another user's camera to their account if they know the serial number and the camera has rebooted within the last two hours. This vulnerability has a CVSS score of 8.8 (High), indicating a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability, as an attacker gains complete control over the camera. Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.