CVE-2018-18602

The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access and monitoring...

CVE-2018-18602

The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access and monitoring...

CVE-2018-18602

The CVE-2018-18602 issue pertains to Guardzilla smart cameras where the Cloud API allows user enumeration, enabling arbitrary camera access and monitoring. Affected software appears to be the Guardzilla Cloud API and associated Guardzilla cameras. The root cause described across sources is user e...

CVE-2018-18600

The CVE-2018-18600 issue affects Guardzilla GZ180 devices, where the remote upgrade feature is vulnerable to command injection via a crafted new firmware version parameter. The vulnerability can lead to shell access and execution of system commands (as described by CNVD-2019-00833 and related sou...

CVE-2018-18601

The CVE-2018-18601 issue affects Guardzilla GZ621W devices (firmware 0.5.1.4) in the cloud communication component. The vulnerability is a Buffer Overflow in the TK_set_deviceModel_req_handle function, which, according to CNVD/CVE records, could allow code execution by a remote attacker. Public d...

PT-2018-14537 · Guardzilla · Guardzilla Gz180

Name of the Vulnerable Software and Affected Versions: Guardzilla GZ180 affected versions not specified Description: The issue concerns the remote upgrade feature in Guardzilla GZ180 devices, which allows command injection via a crafted new firmware version parameter, specifically the new firmwar...

PT-2018-14538 · Guardzilla · Guardzilla Gz621W

Name of the Vulnerable Software and Affected Versions: Guardzilla GZ621W version 0.5.1.4 Description: The issue is related to a Buffer Overflow in the TK set deviceModel req handle function, which is part of the cloud communication component. Recommendations: For Guardzilla GZ621W version 0.5.1.4...

PT-2018-14539 · Guardzilla · Guardzilla

Name of the Vulnerable Software and Affected Versions: Guardzilla smart cameras affected versions not specified Description: The issue allows user enumeration, which can result in arbitrary camera access and monitoring. Recommendations: At the moment, there is no information about a newer version...

Guardzilla Home Cameras Open to Anyone Wanting to Watch Their Footage

Another day, another internet of things IoT issue: A design flaw in the Guardzilla home video surveillance system has been discovered that allows users to watch other homeowners’ Guardzilla videos. The Guardzilla All-In-One Video Security System is a home security platform that provides indoor...