CVE-2019-20467

The CVE-2019-20467 entry concerns the Sannce Smart HD Wifi Security Camera EAN 2 950004 595317. A TELNET interface is available by default (not advertised), with two backdoor accounts (root and default) whose credentials are identical across devices. Attackers can use these accounts to obtain roo...

CVE-2019-20467: Undefined Security Weakness

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. The device by default has a TELNET interface available which is not advertised or functionally used, but is nevertheless available. Two backdoor accounts root and default exist that can be used on this...

CVE-2019-20465

The CVE-2019-20465 issue concerns Sannce Smart HD Wifi Security Camera EAN 2 950004 595317. The connected documents confirm that the vulnerability stems from TELNET access without a password, enabling an attacker to directly control the camera’s pan/zoom/tilt functionality over the network. Affec...

CVE-2019-20464

CVE-2019-20464 affects the Sannce Smart HD Wifi Security Camera EAN 2 950004 595317. The issue is that while the mobile-application streaming over UDP requires a password, other RTSP-based streaming services exposed by the device do not, allowing an unauthenticated attacker to access the video fe...

CVE-2019-20465: Undefined Security Weakness

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. It is possible using TELNET without a password to control the camera's pan/zoom/tilt functionality...

CVE-2019-20464: Improper Authentication

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. By default, a mobile application is used to stream over UDP. However, the device offers many more services that also enable streaming. Although the service used by the mobile application requires a...