D3D Security IP Camera Plaintext Information Disclosure

The vulnerability of the microprogrammed network IP camera D3D Security IP Camera D8801 lies in the transmission of critical information in plaintext. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain user credentials through a specially created HTTP packe...

D3D Security IP Camera RTSP Access

The vulnerability of the Real-Time Streaming Protocol RTSP implementation of the D3D Security IP Camera D8801 software-based network camera is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain access to the video stream using...

CVE-2024-47790: Missing Authorization

UNSUPPORTED WHEN ASSIGNED This vulnerability exists in D3D Security IP Camera D8801 due to usage of insecure Real-Time Streaming Protocol RTSP version for live video streaming. A remote attacker could exploit this vulnerability by crafting a RTSP packet leading to unauthorized access to live feed...

CVE-2024-47789: Cleartext Transmission of Sensitive Information

UNSUPPORTED WHEN ASSIGNED This vulnerability exists in D3D Security IP Camera D8801 due to usage of weak authentication scheme of the HTTP header protocol where authorization tag contain a Base-64 encoded username and password. A remote attacker could exploit this vulnerability by crafting a HTTP...

PT-2024-7544

Name of the Vulnerable Software and Affected Versions D3D Security IP Camera D8801 affected versions not specified Description The issue is related to the implementation of the Real-Time Streaming Protocol RTSP in the D3D Security IP Camera, which has weaknesses in its authorization procedure. Th...

CVE-2024-41623

An issue in D3D Security D3D IP Camera D8801 v.V9.1.17.1.4-20180428 allows a local attacker to execute arbitrary code via a crafted payload...

CVE-2024-41623: Improper Control of Generation of Code

An issue in D3D Security D3D IP Camera D8801 v.V9.1.17.1.4-20180428 allows a local attacker to execute arbitrary code via a crafted payload...