Honeywell多款产品 访问控制错误漏洞

Honeywell I-HIB2PI-UL 2MP, etc., are products of the American company Honeywell. The Honeywell I-HIB2PI-UL 2MP is an infrared dome camera. The Honeywell SMB NDAA MVO-3 is an infrared gimbal camera. The Honeywell PTZ WDR 2MP 32M is a series of night vision cameras. Several Honeywell products have...

CVE-2025-50777: Improper Access Control

The firmware of the AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera version V1.00.02 contains an Incorrect Access Control vulnerability that allows local attackers to gain root shell access. Once accessed, the device exposes critical data including Wi-Fi credentials and ONVIF service...

CVE-2020-6852

CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 has weak authentication of TELNET access, leading to root privileges without any password required...

CVE-2020-9349

The CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 allows access to the RTSP service without a password...

CVE-2020-6852

CVE-2020-6852 affects CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware version 3.4.2.0919, where TELNET access uses weak authentication, allowing root privileges without a password. This vulnerability is documented across multiple sources (NVD, Red Hat, CNVD, CVE lists) with th...

PT-2020-20603

Name of the Vulnerable Software and Affected Versions CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP version 3.4.2.0919 Description The issue allows unauthorized access to the RTSP service without requiring a password. Recommendations For version 3.4.2.0919, consider disabling the RTSP...

PT-2020-19265

Name of the Vulnerable Software and Affected Versions CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP version 3.4.2.0919 Description The issue is related to weak authentication of TELNET access, allowing root privileges without any password required. Recommendations For version 3.4.2.0919,...

CVE-2020-6852: Improper Restriction of Excessive Authentication Attempts

CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 has weak authentication of TELNET access, leading to root privileges without any password required...

CVE-2020-9349: Missing Authentication for Critical Function

The CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 allows access to the RTSP service without a password...

Sunell IPCAMERA IPR54/14AKDN(II)/13 Cross Site Scripting

COMPASS SECURITY ADVISORY https://www.compass-security.com/research/advisories/ Product: Sunell IPCAMERA IPR54/14AKDNII/13 1 Vendor: Shenzhen Sunell Technology Corporation CSNC ID: CSNC-2017-010 Subject: Reflected Cross-Site Scripting Risk: High Effect: Remotely exploitable Author: Stephan Sekula...