CVE-2017-8403: Improper Authentication

360fly 4K cameras allow unauthenticated Wi-Fi password changes and complete access with REST by using the Bluetooth Low Energy pairing procedure, which is available at any time and does not require a password. This affects firmware 2.1.4. Exploitation can use the 360fly Android or iOS application...

PT-2017-18324

Name of the Vulnerable Software and Affected Versions 360fly 4K cameras version 2.1.4 Description The issue allows unauthenticated changes to Wi-Fi passwords and provides complete access through REST by exploiting the Bluetooth Low Energy pairing procedure. This procedure is available at any time...