CVE-2017-8403

360fly 4K cameras allow unauthenticated Wi-Fi password changes and complete access with REST by using the Bluetooth Low Energy pairing procedure, which is available at any time and does not require a password. This affects firmware 2.1.4. Exploitation can use the 360fly Android or iOS application...

CVE-2017-8403

CVE-2017-8403 affects 360fly 4K cameras. The BLE pairing procedure allows unauthenticated Wi‑Fi password changes and full access to REST endpoints at any time without a password. This impacts firmware version 2.1.4. Exploitation can be performed via the 360fly Android or iOS app, or the BlueZ gat...

CVE-2017-8403: Improper Authentication

360fly 4K cameras allow unauthenticated Wi-Fi password changes and complete access with REST by using the Bluetooth Low Energy pairing procedure, which is available at any time and does not require a password. This affects firmware 2.1.4. Exploitation can use the 360fly Android or iOS application...