CVE-2021-3792

Some device communications in some Motorola-branded Binatone Hubble Cameras with backend Hubble services are not encrypted which could lead to the communication channel being accessible by an attacker...

Binatone Motorola-branded Camera 加密问题漏洞

The Binatone Motorola-branded Camera is a Binatone licensed Motorola-branded product camera from Binatone, Inc. The vulnerability can be exploited to obtain encryption keys used to decrypt firmware update packages...

Binatone Motorola-branded Camera 安全漏洞

The Binatone Motorola-branded Camera is a Binatone licensed Motorola-branded camera from Binatone, Inc. The vulnerability can be exploited by an attacker on the same network to access the administration page, which can lead to information disclosure or update the device firmware with validated...

Binatone Motorola-branded Camera 授权问题漏洞

The Binatone Motorola-branded Camera is a Binatone licensed Motorola-branded product camera from Binatone, Inc. The Binatone Motorola-branded Camera is vulnerable to licensing issues, which could be exploited by an attacker to gain physical access to the device through the interface or unauthoriz...

Binatone Motorola-branded Camera 日志信息泄露漏洞

Binatone Motorola-branded Camera is a Binatone licensed Motorola-branded product camera from Binatone Inc. The Binatone Motorola-branded Camera is vulnerable to information disclosure, which could be exploited by an attacker to download an encrypted log file containing sensitive information such ...

Binatone Motorola-branded Camera 安全漏洞

The Binatone Motorola-branded Camera is a Binatone licensed Motorola-branded product camera from Binatone, Inc. A security vulnerability exists in the Binatone Motorola-branded Camera, which stems from the fact that some device communications are not encrypted and could be exploited by an attacke...

Motorola-branded Binatone Hubble Cameras 安全漏洞

The Binatone Global Binatone Motorola-branded Camera is a Binatone licensed and manufactured Motorola-branded product camera from Binatone Global. A security vulnerability exists in the Motorola-branded Binatone Hubble Cameras, which can be exploited by attackers to gain unauthorized access to th...

Binatone Motorola-branded Camera 安全漏洞

Binatone Motorola-branded Camera is a Binatone licensed Motorola-branded product camera from Binatone Inc. A buffer overflow vulnerability exists in Binatone Motorola-branded Camera, which can be exploited by attackers to perform denial of service attacks on the device...

Unspecified Vulnerability in Fortinet FortiClient (CNVD-2021-84249)

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A security vulnerability exists in FortiClientMacOS...

Realtek RtsUpx Usb Utility Driver Access Control Error Vulnerability

Realtek RtsUpx Usb Utility Driver is a Usb utility driver from Realtek Semiconductor China. An Access Control Error vulnerability exists in the Realtek RtsUpx USB Utility Driver for Camera Hub Audio, which originates when the product allows arbitrary reads and writes from physical memory via a...

Realtek RtsUpx Usb Utility Driver Access Control Error Vulnerability (CNVD-2021-91639)

Realtek RtsUpx Usb Utility Driver is a Usb utility driver from Realtek Semiconductor China.An access control error vulnerability exists in the Realtek RtsUpx USB Utility Driver for Camera Hub Audio, which stems from the product's failure to device's IO control packet for permission detection. An...

Realtek RtsUpx Usb Utility Driver Resource Management Error Vulnerability

Realtek RtsUpx Usb Utility Driver is a Usb utility driver from Realtek Semiconductor China.A resource management error vulnerability exists in the Realtek RtsUpx USB Utility Driver for Camera Hub Audio, which stems from the product's handling of IO control packets without proper memory boundary...

CVE-2021-42754

An improper control of generation of code vulnerability CWE-94 in FortiClientMacOS versions 7.0.0 and below and 6.4.5 and below may allow an authenticated attacker to hijack the MacOS camera without the user permission via the malicious dylib file...

CVE-2021-42754

An improper control of generation of code vulnerability CWE-94 in FortiClientMacOS versions 7.0.0 and below and 6.4.5 and below may allow an authenticated attacker to hijack the MacOS camera without the user permission via the malicious dylib file...

Privilege escalation

An improper control of generation of code vulnerability CWE-94 in FortiClientMacOS versions 7.0.0 and below and 6.4.5 and below may allow an authenticated attacker to hijack the MacOS camera without the user permission via the malicious dylib file...

CVE-2021-42754

An improper control of generation of code vulnerability CWE-94 in FortiClientMacOS versions 7.0.0 and below and 6.4.5 and below may allow an authenticated attacker to hijack the MacOS camera without the user permission via the malicious dylib file...

CVE-2021-42754

Fortinet FortiClientMacOS (versions ≤7.0.0 and ≤6.4.5) is affected by CVE-2021-42754 due to an improper control of code generation (CWE-94). A malicious dylib loader can cause FortiClient’s camera handling to hijack the MacOS camera without user permission. The vulnerability requires an authentic...

CVE-2021-42754

An improper control of generation of code vulnerability CWE-94 in FortiClientMacOS versions 7.0.0 and below and 6.4.5 and below may allow an authenticated attacker to hijack the MacOS camera without the user permission via the malicious dylib file...

CVE-2021-36925

CVE-2021-36925 details (normal mode) Realtek RtsUpx.sys, the USB Utility Driver for Camera/Hub/Audio, up to version 1.14.0.0 is affected. The vulnerability allows local, low-privileged users to perform arbitrary reads/writes in physical memory via a crafted IOCTL to the device, leading to potenti...

CVE-2021-36924

CVE-2021-36924 affects Realtek’s RtsUpx USB Utility Driver (Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio, up to version 1.14.0.0). The vulnerability is a pool overflow triggered by a crafted Device IO Control packet, allowing local, low-privilege users to escalate privileges, potentiall...