8 matches found
CVE-2025-67158
CVE-2025-67158 — Revotech I6032W-FHW Resumen El firmware de la cámara IP Revotech I6032W-FHW contiene una vulnerabilidad de omisión de autenticación en el endpoint /cgi-bin/jvsweb.cgi. El dispositivo no valida los campos user.name y user.digest incluidos en las solicitudes de API basadas en JSON,...
CVE-2025-67158
An authentication bypass in the /cgi-bin/jvsweb.cgi endpoint of Revotech I6032W-FHW v1.0.0014 - 20210517 allows attackers to access sensitive information and escalate privileges via a crafted HTTP request...
PT-2026-1104
Name of the Vulnerable Software and Affected Versions Revotech I6032W-FHW versions 1.0.0014 through 20210517 Description An authentication bypass exists in the /cgi-bin/jvsweb.cgi endpoint of the software. This allows attackers to access sensitive information and escalate privileges by sending a...
Revotech I6032W-FHW 安全漏洞
Revotech I6032W-FHW is a surveillance camera from Revotech, United Arab Emirates. A security vulnerability exists in Revotech I6032W-FHW version v1.0.0014, which stems from an authentication bypass that could lead to access to sensitive information and elevated privileges...
Revotech I6032W-FHW Authentication Bypass
The Revotech I6032W-FHW IP camera firmware contains an authentication bypass vulnerability in the /cgi-bin/jvsweb.cgi endpoint. The device does not validate the user.name and user.digest fields included in JSON-based API requests, allowing unauthenticated attackers to invoke administrative method...
CVE-2025-67158
An authentication bypass in the /cgi-bin/jvsweb.cgi endpoint of Revotech I6032W-FHW v1.0.0014 - 20210517 allows attackers to access sensitive information and escalate privileges via a crafted HTTP request...
CVE-2025-67158: Improper Authentication
An authentication bypass in the /cgi-bin/jvsweb.cgi endpoint of Revotech I6032W-FHW v1.0.0014 - 20210517 allows attackers to access sensitive information and escalate privileges via a crafted HTTP request...