An information leak exists in Wanscamβs HW0021 network camera that allows an unauthenticated remote attacker to recover the administrator username and password via an ONVIF GetSnapshotUri request.
[
{
"product": "Wanscam HW0021",
"vendor": "Wanscam",
"versions": [
{
"status": "affected",
"version": "11.6.5.1.1-20161213"
}
]
}
]