Amcrest IP Camera - webCapsConfig Information Disclosure (CVE-2024-12984)

Amcrest IP cameras expose /webcaps/webCapsConfig without authentication, disclosing deviceType and WebVersion metadata. !/usr/bin/env python3 -- coding: utf-8 -- """Amcrest IP camera webCapsConfig information disclosure CVE-2024-12984.""" from kittysploit import from lib.protocols.http.httpclient...

CVE-2024-12984: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability classified as problematic has been found in Amcrest IP2M-841B, IP2M-841W, IPC-IP2M-841B, IPC-IP3M-943B, IPC-IP3M-943S, IPC-IP3M-HX2B and IPC-IPM-721S up to 20241211. This affects an unknown part of the file /webcaps/webCapsConfig of the component Web Interface. The manipulation...