February 11, 2025—KB5052016 (Monthly Rollup)

None None...

CVE-2024-12569

Disclosure of sensitive information in a Milestone XProtect Device Pack driver’s log file for third-party cameras, allows an attacker to read camera credentials stored in the Recording Server under specific conditions...

Mass Campaign of Murdoc Botnet Mirai: A New Variant of Corona Mirai

The Qualys Threat Research Unit has uncovered a large-scale, ongoing operation within the Mirai campaign, dubbed Murdoc Botnet. This variant exploits vulnerabilities targeting AVTECH Cameras and Huawei HG532 routers. It demonstrates enhanced capabilities, exploiting vulnerabilities to compromise...

Mirai Variant Murdoc Botnet Exploits AVTECH IP Cameras and Huawei Routers

Cybersecurity researchers have warned of a new large-scale campaign that exploits security flaws in AVTECH IP cameras and Huawei HG532 routers to rope the devices into a Mirai botnet variant dubbed Murdoc Botnet. The ongoing activity "demonstrates enhanced capabilities, exploiting vulnerabilities...

How to secure body-worn cameras and protect footage from cyber threats

TL;DR Body-worn cameras are used by police and other security personnel Cameras are taken into the field but footage could be presented as evidence Cryptographic approaches are needed to ensure the confidentiality and integrity of captured video and audio Cybersecurity challenges of body-worn...

IoT Botnet Linked to Large-scale DDoS Attacks Since the End of 2024

Since the end of 2024, we have been continuously monitoring large-scale DDoS attacks orchestrated by an IoT botnet exploiting vulnerable IoT devices such as wireless routers and IP cameras...

编号撤回

Dahua IPC-HFW1200S and so on are products of Dahua China.Dahua IPC-HFW1200S is a 2MP Color Monochrome Full HD Network Compact IR Bullet Camera.Dahua IPC-HFW2300R-Z is a 3MP IP Bullet Camera.Dahua IPC-HFW5220E Dahua IPC-HFW5220E-Z is a 2MP HD network IR bullet camera. This CVE number has been...

Dahua多款产品 安全漏洞

Dahua IPC-HFW1200S and others are products of Dahua China.Dahua IPC-HFW1200S is a 2MP Color Monochrome Full HD Network Compact IR Bullet Camera.Dahua IPC-HFW2300R-Z is a 3MP IP Bullet Camera.Dahua IPC-HFW5220E Dahua IPC-HFW5220E-Z is a 2MP HD network IR bullet camera. A security vulnerability...

Amcrest Technologies IP Camera Information Disclosure Vulnerability (Dec 2024) - Active Check

Multiple Amcrest Technologies IP Cameras are prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Casino Players Using Hidden Cameras for Cheating

The basic strategy is to place a device with a hidden camera in a position to capture normally hidden card values, which are interpreted by an accomplice off-site and fed back to the player via a hidden microphone. Miniaturization is making these devices harder to detect. Presumably AI will soon...

PT-2024-17784 · Intelbras · Intelbras Vip S4020 G3 +3

Name of the Vulnerable Software and Affected Versions: Intelbras VIP S3020 G2 versions up to 20241222 Intelbras VIP S4020 G2 versions up to 20241222 Intelbras VIP S4020 G3 versions up to 20241222 Intelbras VIP S4320 G2 versions up to 20241222 Description: A critical vulnerability was found in the...

Reolink Multiple IP Cameras OS Command Injection Vulnerability

Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W IP cameras contain an authenticated OS command injection vulnerability. This vulnerability allows an authenticated admin to use the "TestEmail" functionality to inject and run OS commands as root...

VulnCheck KEV: CVE-2019-11001

Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W IP cameras contain an authenticated OS command injection vulnerability. This vulnerability allows an authenticated admin to use the "TestEmail" functionality to inject and run OS commands as root...

Poker Cheaters Allegedly Use Tiny Hidden Cameras to Spot Dealt Cards

Several recent schemes were uncovered involving poker players at casinos allegedly using miniature cameras, concealed in personal electronics, to spot cards. Should players everywhere be concerned?...

CVE-2024-9404

This vulnerability could lead to denial-of-service or service crashes. Exploitation of the moxacmd service, because of insufficient input validation, allows attackers to disrupt operations. If exposed to public networks, the vulnerability poses a significant remote threat, potentially allowing...

CVE-2024-9404 Denial-of-Service Vulnerability

This vulnerability could lead to denial-of-service or service crashes. Exploitation of the moxacmd service, because of insufficient input validation, allows attackers to disrupt operations. If exposed to public networks, the vulnerability poses a significant remote threat, potentially allowing...

CVE-2024-9404

CVE-2024-9404 concerns a DoS vulnerability in MOXA devices caused by insufficient input validation in the moxa_cmd service, leading to potential service disruption or crashes when exposed to networks. The initial CVE entry documents a high-severity impact with CVSS scores (3.1: 7.5/ HIGH and 4.0:...

CVE-2024-9404 Denial-of-Service Vulnerability

This vulnerability could lead to denial-of-service or service crashes. Exploitation of the moxacmd service, because of insufficient input validation, allows attackers to disrupt operations. If exposed to public networks, the vulnerability poses a significant remote threat, potentially allowing...

Sony Network Cameras Heap-based Buffer Overflow (CVE-2007-3488)

Heap-based buffer overflow in the viewer ActiveX control in Sony Network Camera SNC-RZ25N before 1.30; SNC-P1 and SNC-P5 before 1.29; SNC-CS10 and SNC-CS11 before 1.06; SNC-DF40N and SNC-DF70N before 1.18; SNC-RZ50N and SNC-CS50N before 2.22; SNC-DF85N, SNC-DF80N, and SNC-DF50N before 1.12; and...

Lorex 2K Indoor Wi-Fi Security Camera 安全漏洞

Lorex 2K Indoor Wi-Fi Security Camera is a series of security cameras from Lorex Canada. A security vulnerability previously existed in the Lorex 2K Indoor Wi-Fi Security Camera version 2.800.0000000.8.R.20241111. An unauthenticated attacker exploiting this vulnerability could trigger a stack-bas...