CVE-2022-31209

An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The firmware contains a potential buffer overflow by calling strcpy without checking the string length beforehand...

Hardcoded credentials

An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The binary file /usr/local/sbin/webproject/setparam.cgi contains hardcoded credentials to the web application. Because these accounts cannot be deactivated or have their passwords changed, they are considered to be backdoor accounts...

Default credentials

An issue was discovered in Infiray IRAY-A8Z3 1.0.957. There is a blank root password for TELNET by default...

Buffer overflow

An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The firmware contains a potential buffer overflow by calling strcpy without checking the string length beforehand...

Code injection

An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The webserver contains an endpoint that can execute arbitrary commands by manipulating the cmdstring URL parameter...

CVE-2022-31211

The CVE-2022-31211 entry affects Infiray IRAY-A8Z3 thermal camera, version 1.0.957, per multiple sources. Root cause: a default blank root password for TELNET is present, enabling unauthenticated access. Connected documents indicate additional hard-coded credentials and broader vulnerability cont...

CVE-2022-31211

An issue was discovered in Infiray IRAY-A8Z3 1.0.957. There is a blank root password for TELNET by default...

CVE-2022-31210

CVE-2022-31210 affects Infiray IRAY-A8Z3 v1.0.957. The binary /usr/local/sbin/webproject/set_param.cgi contains hardcoded credentials, creating backdoor accounts that cannot be disabled or password-changed. Red Hat and NVD entries corroborate the same description. No patch/version fix is indicate...

CVE-2022-31210

An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The binary file /usr/local/sbin/webproject/setparam.cgi contains hardcoded credentials to the web application. Because these accounts cannot be deactivated or have their passwords changed, they are considered to be backdoor accounts...

CVE-2022-31209

CVE-2022-31209 affects Infiray IRAY-A8Z3 firmware 1.0.957. The issue is a buffer overflow caused by strcpy() being called without validating string length, enabling potential overflow. Public details in connected documents confirm vulnerable component and root cause; no remediation is provided by...

CVE-2022-31209

An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The firmware contains a potential buffer overflow by calling strcpy without checking the string length beforehand...

CVE-2022-31208

An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The webserver contains an endpoint that can execute arbitrary commands by manipulating the cmdstring URL parameter...

CVE-2022-31208

Infiray IRAY-A8Z3 1.0.957 webserver is affected by CVE-2022-31208: an endpoint can execute arbitrary commands via the cmd_string URL parameter. Root cause described as improper handling of cmd_string leading to command execution. The vulnerability supports network access with low privileges and n...

The vulnerability of the strcpy() function in the microprogramming software for thermal imagers like Infiray IRAY-A8Z3 allows a intruder to execute arbitrary code.

The vulnerability of the strcpy function in the microprogramming software for Infiray IRAY-A8Z3 lies in the execution of the operation outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the telnetd server software in the Infiray IRAY-A8Z3 camera system allows a intruder to elevate their privileges to the root level.

The vulnerability of the telnetd server software in Infiray IRAY-A8Z3 cameras is related to the absence of a password for the root user account. Exploiting this vulnerability allows an attacker to elevate their privileges to root status by connecting through port 23...

The vulnerability of the Microprogrammed Software for Infiray IRAY-A8Z3 thermal imagers arises from incorrect code generation control, allowing a intruder to execute arbitrary code.

The vulnerability of the Infiray IRAY-A8Z3 thermal imager’s microprogramming software is related to incorrect handling of the code generation process. Exploiting this vulnerability could allow an intruder to execute arbitrary code using the cmdstring URL parameter...

The vulnerability of the /usr/local/sbin/webproject/set_param.cgi script in the Infiray IRAY-A8Z3 thermal imager software allows a intruder to escalate their privileges.

The vulnerability of the /usr/local/sbin/webproject/setparam.cgi file in the Infiray IRAY-A8Z3 thermal imager software is related to the use of pre-set user credentials. Exploiting this vulnerability could allow an attacker to gain increased privileges remotely...

Infiray IRAY-A8Z3 thermal camera 信任管理问题漏洞

The Infiray IRAY-A8Z3 thermal camera is a thermal camera from the Chinese company Infiray. A security vulnerability exists in the Infiray IRAY-A8Z3 thermal camera version 1.0.957, which originates from the use of hard-coded Web credentials, authenticated remote code execution, buffer overflow,...

Infiray IRAY-A8Z3 thermal camera 安全漏洞

The Infiray IRAY-A8Z3 thermal camera is a thermal camera from the Chinese company Infiray. A security vulnerability exists in the Infiray IRAY-A8Z3 thermal camera version 1.0.957, which originates from the use of hard-coded Web credentials, authenticated remote code execution, buffer overflow,...

Infiray IRAY-A8Z3 1.0.957 Code Execution / Overflow / Hardcoded Credentials

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Vulnerabilities product: Infiray IRAY-A8Z3 thermal camera vulnerable version: V1.0.957 fixed version: None CVE number: CVE-2022-31208, CVE-2022-31209,...