Default credentials

On Beijing Hanbang Hanbanggaoke devices, because user-controlled input is not sufficiently sanitized, sending a PUT request to /ISAPI/Security/users/1 allows an admin password change...

CVE-2017-14335

Beijing Hanbang Hanbanggaoke IP Camera devices are affected. A vulnerability exists due to insufficient sanitization of user-controlled input, allowing a remote attacker to change the administrator password by sending a PUT request to /ISAPI/Security/users/1. The PoC demonstrates changing admin/p...

CVE-2017-14335

On Beijing Hanbang Hanbanggaoke devices, because user-controlled input is not sufficiently sanitized, sending a PUT request to /ISAPI/Security/users/1 allows an admin password change...

CVE-2017-14335: Improper Input Validation

On Beijing Hanbang Hanbanggaoke devices, because user-controlled input is not sufficiently sanitized, sending a PUT request to /ISAPI/Security/users/1 allows an admin password change...