Lucene search
+L

5 matches found

BDU FSTEC
BDU FSTEC
•added 2025/03/10 12:00 a.m.•14 views

The vulnerability of the Microprogrammed Software for IP Cameras from Smartwares, models CIP-37210AT and C724IP, arises from the lack of measures to sanitize input data at the control level. This allows intruders to execute arbitrary commands.

The vulnerability of the Microprogrammed Software for Smartwares CIP-37210AT and C724IP cameras is related to the lack of measures for cleaning incoming data at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

8.8CVSS7.1AI score0.00665EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2025/03/10 12:00 a.m.•15 views

The vulnerability of the telnet service provided by the microprogramming-based IP cameras from Smartwares, models CIP-37210AT and C724IP, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the telnet service provided by the microprogramming-based IP cameras from Smartwares, models CIP-37210AT and C724IP, is related to the use of default login credentials. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

7.4CVSS6.8AI score0.00162EPSS
SaveExploits0References4Affected Software2
CNNVD
CNNVD
•added 2025/03/06 12:00 a.m.•15 views

Smartwares CIP-37210AT和Smartwares C724IP 安全漏洞

The Smartwares CIP-37210AT and Smartwares C724IP are both products of Smartwares, Inc.The Smartwares CIP-37210AT is an IP camera device for home or office security monitoring.The Smartwares C724IP is an IP camera device that is for home or office security monitoring. A security vulnerability exis...

7.7CVSS6.1AI score0.00665EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/06 12:00 a.m.•0 views

CVE-2024-13892: Improper Neutralization of Special Elements used in an OS Command

Smartwares cameras CIP-37210AT and C724IP, as well as others which share the same firmware in versions up to 3.3.0, are vulnerable to command injection. During the initialization process, a user has to use a mobile app to provide devices with Access Point credentials. This input is not properly...

7.7CVSS7.6AI score0.00665EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/06 12:00 a.m.•1 views

CVE-2024-13894: Improper Limitation of a Pathname to a Restricted Directory

Smartwares cameras CIP-37210AT and C724IP, as well as others which share the same firmware in versions up to 3.3.0, are vulnerable to path traversal. When an affected device is connected to a mobile app, it opens a port 10000 enabling a user to download pictures shot at specific moments by...

5.9CVSS6.2AI score0.00223EPSS
SaveExploits0References1
Rows per page
Query Builder