15 matches found
CVE-2023-31595
CVE-2023-31595 IC Realtime ICIP-P2012T는 열린 포트를 통한 부적절한 접근 제어Incorrect Access Control에 취약함 IC Realtime IP PTZ Dome Camera ICIP-P2012 소프트웨어 버전: 2.420 노출된 포트9989는 요청 시점의 라이브 스냅샷을 반환하며, 스크립트를 사용하면 매 x초마다 라이브 피드 이미지를 얻는 데 악용될 수 있습니다. 이 취약점은 데이터의 기밀성에 심각한 영향을 미치며, 정찰 단계사람 식별, 비밀번호 등에서 모든 위협에 사용될 수 있습니다...
CVE-2023-31594
CVE-2023-31594 IC Realtime ICIP-P2012T 存在不正确的访问控制漏洞 IC Realtime IP PTZ 球型摄像机 ICIP-P2012T 软件版本 2.420 中存在未认证的流媒体通道 实时源(MJPEG)可通过暴露的 HTTP 通道使用 VLC 网络流进行流式传输。此漏洞严重影响了客户的机密性,并可能用于侦察阶段(识别人员、资产、密码等)。 概念验证 POC 如果允许 HTTP 流式传输,则可使用 URL 路径让用户无需任何认证即可获取摄像机的 MJPEG 流。 路径:...
EUVD-2023-35892
Malicious code in bioql PyPI...
CVE-2023-31594
IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via an exposed HTTP channel using VLC network...
CVE-2023-31594
IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via an exposed HTTP channel using VLC network...
PT-2023-23399
Name of the Vulnerable Software and Affected Versions IC Realtime ICIP-P2012T version 2.420 Description The issue concerns an Incorrect Access Control vulnerability. It can be exploited via an exposed HTTP channel using the VLC network. Recommendations For IC Realtime ICIP-P2012T version 2.420,...
CVE-2023-31594
CVE-2023-31594 affects IC Realtime ICIP-P2012T firmware 2.420. The issue is an Incorrect Access Control via an exposed HTTP channel (VLC-based) that can expose MJPEG/streaming content, leading to potential confidentiality impact (C:H, P: none). The CVSS3.1 base score is 7.5 (NETWORK, LOW attack c...
CVE-2023-31595
IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via unauthenticated port access...
CVE-2023-31595
IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via unauthenticated port access...
Improper access control
IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via unauthenticated port access...
Exploit for CVE-2023-31595
CVE-2023-31595 IC Realtime ICIP-P2012T is vulnerable to Incorr...
IC Realtime ICIP-P2012T 安全漏洞
The IC Realtime ICIP-P2012T is a 2 megapixel camera from IC Realtime. A security vulnerability exists in IC Realtime ICIP-P2012T version 2.420, which stems from the susceptibility to incorrect access control via unauthenticated port access...
PT-2023-23400
Name of the Vulnerable Software and Affected Versions IC Realtime ICIP-P2012T version 2.420 Description The issue concerns Incorrect Access Control, allowing unauthenticated access via a specific port. Recommendations For IC Realtime ICIP-P2012T version 2.420, restrict access to the vulnerable po...
CVE-2023-31595
IC Realtime ICIP-P2012T (firmware 2.420) is affected by an Incorrect Access Control vulnerability exposed via unauthenticated access to port 9989. A proof‑of‑concept demonstrates obtaining a live snapshot feed from the camera, indicating confidentiality impact. No official patch/version is stated...