CVE-2017-5174: Authentication Bypass Using an Alternate Path or Channel

An Authentication Bypass issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. An authentication bypass vulnerability has been identified. The existing file system architecture could allow attackers to bypass the access control that may allow remote code execution...

CVE-2017-5173: Improper Neutralization of Special Elements used in an OS Command

An Improper Neutralization of Special Elements in an OS command issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. An improper neutralization of special elements vulnerability has been identified. If special elements are not properly neutralized, an attacker can call...

CVE-2017-5173

An Improper Neutralization of Special Elements in an OS command issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. An improper neutralization of special elements vulnerability has been identified. If special elements are not properly neutralized, an attacker can call...

PT-2017-16363

Name of the Vulnerable Software and Affected Versions Geutebruck IP Camera G-Cam/EFD-2250 version 1.11.0.12 Description An Authentication Bypass issue was discovered, allowing attackers to bypass access control, which may enable remote code execution due to the existing file system architecture...

Wireless IP Camera (P2P) WIFICAM Information Disclosure Vulnerability

Wireless IP Camera P2P WIFICAM is a remote IP camera. An information disclosure vulnerability exists in the Wireless IP Camera P2P WIFICAM device. The vulnerability can be exploited by an attacker to gain unauthorized access to traffic via tcp/av01 or tcp/av00...

Wireless IP Camera (P2P) WIFICAM Cameras Information Disclosure (CVE-2017-8225)

An information disclosure vulnerability exists in multiple Wireless IP Camera P2P WIFICAM cameras. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information and gain unauthorized access into the affected system...

Wireless IP Camera (P2P) WIFICAM Information Disclosure Vulnerability (CNVD-2017-06908)

Wireless IP Camera P2P WIFICAM is a remote IP camera. A security vulnerability exists in the Wireless IP Camera P2P WIFICAM device. The vulnerability can be exploited by an attacker to access the root account via remote access...

Wireless IP Camera (P2P) WIFICAM Identity Bypass Vulnerability

Wireless IP Camera P2P WIFICAM is a remote IP camera. A security vulnerability exists in the Wireless IP Camera P2P WIFICAM device that stems from the program failing to properly check the access permissions of the .ini file. An attacker can exploit this vulnerability to bypass authentication...

Wireless IP Camera (P2P) WIFICAM Sensitive Information Disclosure Vulnerability (CNVD-2017-06906)

Wireless IP Camera P2P WIFICAM is a remote IP camera. A security vulnerability exists in the Wireless IP Camera P2P WIFICAM device that originates from the storage of the 'Apple Production IOS Push Services' RSA key and certificate in /system/www/pem/ck.pem in the firmware. RSA key and certificat...

Wireless IP Camera (P2P) WIFICAM Cameras Remote Code Execution

A code execution vulnerability exists in multiple Wireless IP Camera P2P WIFICAM cameras. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2017-8221

Wireless IP Camera P2P WIFICAM devices rely on a cleartext UDP tunnel protocol aka the Cloud feature for communication between an Android application and a camera device, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2017-8224

Wireless IP Camera P2P WIFICAM devices have a backdoor root account that can be accessed with TELNET...

CVE-2017-8225

On Wireless IP Camera P2P WIFICAM devices, access to .ini files containing credentials is not correctly checked. An attacker can bypass authentication by providing an empty loginuse parameter and an empty loginpas parameter in the URI...

CVE-2017-8223

On Wireless IP Camera P2P WIFICAM devices, an attacker can use the RTSP server on port 10554/tcp to watch the streaming without authentication via tcp/av01 or tcp/av00...

Authentication flaw

On Wireless IP Camera P2P WIFICAM devices, access to .ini files containing credentials is not correctly checked. An attacker can bypass authentication by providing an empty loginuse parameter and an empty loginpas parameter in the URI...

Authentication flaw

On Wireless IP Camera P2P WIFICAM devices, an attacker can use the RTSP server on port 10554/tcp to watch the streaming without authentication via tcp/av01 or tcp/av00...

Code injection

Wireless IP Camera P2P WIFICAM devices have a backdoor root account that can be accessed with TELNET...

Design/Logic Flaw

Wireless IP Camera P2P WIFICAM devices rely on a cleartext UDP tunnel protocol aka the Cloud feature for communication between an Android application and a camera device, which allows remote attackers to obtain sensitive information by sniffing the network...

Information disclosure

Wireless IP Camera P2P WIFICAM devices have an "Apple Production IOS Push Services" private RSA key and certificate stored in /system/www/pem/ck.pem inside the firmware, which allows attackers to obtain sensitive information...

CVE-2017-8221

Wireless IP Camera P2P WIFICAM devices rely on a cleartext UDP tunnel protocol aka the Cloud feature for communication between an Android application and a camera device, which allows remote attackers to obtain sensitive information by sniffing the network...