Weak Password Vulnerability in Internet Video Browser of Tiandiweiye Technology Co.

Tiandiweiye is an intelligent security solution provider, based on artificial intelligence, big data, cloud computing, Internet of Things and other technologies, providing intelligent video products, system solutions and high-quality technical services for public security, politics and law,...

Weak Password Vulnerability in Network Video Surveillance Client

Network Video Surveillance Client is a video surveillance software. The Network Video Surveillance Client suffers from a weak password vulnerability. An attacker uses the default weak password to log into the backend and obtain sensitive information...

Network Video Surveillance Client Has Logic Flaw Vulnerability

Network Video Surveillance Client is a network video surveillance system. A logic flaw vulnerability exists in the Network Video Surveillance Client. An attacker can exploit the vulnerability to bypass the login password and obtain sensitive information by modifying the value in the return packet...

Ubiquiti: Change Your Password, Enable 2FA

Ubiquiti, a major vendor of cloud-enabled Internet of Things IoT devices such as routers, network video recorders, security cameras and access control systems, is urging customers to change their passwords and enable multi-factor authentication. The company says an incident at a third-party cloud...

Planet NVR-915 and Planet NVR-1615 Trust Management Issues Vulnerabilities

The Planet NVR-915 is a network video recorder from China-based Planet. PLANET Technology Corp NVR-915 and NVR-1615 Versions prior to 2020-10-28 are vulnerable to a trust management issue that stems from embedding default credentials for root access via telnet. Remote root access to the device is...

Cellinx NVT Web Server Access Control Error Vulnerability

Cellinx NVT Web Server is a web platform for virtual terminal management NVT from Cellinx, Korea. The platform is mainly used for managing video surveillance devices, and it is divided into monitoring page and setting page to control terminals. An access control error vulnerability exists in...

Castel NextGen DVR Management Feature Elevation of Privilege Vulnerability

Castel NextGen DVR is a network video device. A security vulnerability exists in the Castel NextGen DVR management feature that allows a remote attacker can exploit the vulnerability to submit a special request that can elevate privileges and gain administrator privileges...

Castel NextGen DVR Cross-Site Request Forgery Vulnerability

Castel NextGen DVR is a network video device. A cross-site request forgery vulnerability exists in Castel NextGen DVR v1.0.0. The vulnerability stems from a WEB application that does not adequately validate that a request is coming from a trusted user. An attacker could use this vulnerability to...

Weak Password Vulnerability in Network Video Server of Longchamp Cintron

Ltd. is a provider of products and application solutions in the field of network video surveillance in China. A weak password vulnerability exists in the network video server, which can be exploited by an attacker to log in to the backend of the system...

Multiple Dahua Products Input Validation Error Vulnerability (CNVD-2020-22980)

Dahua SD6AL Series and so on are the products of Dahua, China.SD6AL Series is a network camera of SD6AL series.NVR 5x Series is a network video recorder of 5x series.IPC-HX2XXX Series is a network camera of IPC-HX2XXX series.NVR 5x Series is a network video recorder of 5x series.NVR 5x Series is ...

CVE-2020-5736

Amcrest cameras and NVR are vulnerable to a null pointer dereference over port 37777. An authenticated remote attacker can abuse this issue to crash the device...

CVE-2020-5735

Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code...

Siemens SiNVR 3 Video Server and SiNVR 3 Central Control Server (CCS) Information Disclosure Vulnerability

SiNVR is the Siemens OEM version of SiVMS, a video management solution acquired by PKE Deutsch land gmmbH and formerly distributed by Schille Informationssysteme gmmbH. An information disclosure vulnerability exists in Siemens SiNVR 3 Video Server and SiNVR 3 Central Control Server CCS. A local...

Hardcoded credentials

In Honeywell Performance IP Cameras and Performance NVRs, the integrated web server of the affected devices could allow remote attackers to obtain web configuration data in JSON format for IP cameras and NVRs Network Video Recorders, which can be accessed without authentication over the network...

SQL Injection Vulnerability in Fiberhome's Eyeshot Series of Network Video Surveillance Platforms

Eyeshot series network video surveillance platform is an integrated video surveillance management system developed by Fiberhome Zongzhi based on IP network technology as the core of large-scale image remote monitoring, transmission, storage and management. Fiberhome Eyeshot series network video...

CVE-2019-9653

NUUO Network Video Recorder Firmware 1.7.x through 3.3.x allows unauthenticated attackers to execute arbitrary commands via shell metacharacters to handleloadconfig.php...

Code injection

NUUO Network Video Recorder Firmware 1.7.x through 3.3.x allows unauthenticated attackers to execute arbitrary commands via shell metacharacters to handleloadconfig.php...

CVE-2019-9653

NUUO Network Video Recorder Firmware 1.7.x through 3.3.x allows unauthenticated attackers to execute arbitrary commands via shell metacharacters to handleloadconfig.php...

CVE-2019-9653

CVE-2019-9653 affects NUUO Network Video Recorder Firmware 1.7.x–3.3.x. An unauthenticated attacker can execute arbitrary commands via shell metacharacters in the handle_load_config.php endpoint, enabling remote code execution. The vulnerability is illustrated by multiple sources (NVD, Red Hat, C...

Binary Vulnerability in Hikvision Video Playback Library SDK

Hikvision Playback Library SDK is a secondary development kit related to playback of Hikvision embedded network DVRs, video servers, and supporting products for IP devices. A binary vulnerability exists in the Hikvision Video Playback Library SDK. An attacker can exploit the vulnerability to caus...