CVE-2020-25748

CVE-2020-25748 建议描述 在 Rubetek RV-3406、RV-3409 和 RV-3411 摄像头（固件版本 v342、v339）中发现了一个明文传输问题。 中间人可以拦截并修改来自摄像头的视频数据，这些数据以未加密的形式传输。还可以修改来自 NTP 和 RTSP 服务器的响应，并强制摄像头使用更改后的值。 附加信息 已向供应商发送有关该漏洞的信函。 漏洞类型 CWE-319：敏感信息的明文传输 产品供应商 Rubetek https://rubetek.com/ 受影响产品代码库 摄像头 RV-3406 - 固件版本 339 和 342 受到影响。没有修复版本。 摄...

CVE-2020-25747

CVE-2020-25747 建议描述 Rubetek RV-3406、RV-3409 和 RV-3411 摄像头（固件版本 v342、v339）的 Telnet 服务可允许远程攻击者在无需认证的情况下访问 RTSP 和 ONFIV 服务。因此，攻击者可以观看摄像头的实时流，旋转摄像头，更改某些设置（亮度、清晰度、时间），重启摄像头，或将其重置为出厂设置。 附加信息 已就该漏洞向供应商发送了一封信函。 漏洞类型 不正确的访问控制 产品供应商 Rubetek https://rubetek.com/ 受影响产品 摄像头 RV-3406 - 固件版本 339 和 342 受影响，没有修复版本...

CVE-2020-25749

CVE-2020-25749 建议描述 Rubetek摄像机RV-3406、RV-3409和RV-3411的Telnet服务（固件版本v342、v339）可能允许远程攻击者通过高权限账户完全控制设备。该漏洞源于系统账户使用了默认且静态的密码。Telnet服务无法禁用，且无法通过标准功能更改此密码。 附加信息 已向供应商发送关于该漏洞的信函。 漏洞类型 其他 CWE-798: 使用硬编码凭证 产品供应商 Rubetek https://rubetek.com/ 受影响产品代码库 摄像机RV-3406 - 固件版本339和342受影响。无修复版本。 摄像机RV-3409 -...

EUVD-2020-18401

Malware in sbrugna...

EUVD-2020-18399

Malware in sbrugna...

EUVD-2020-18400

Malware in sbrugna...

CVE-2020-25749

The Telnet service of Rubetek cameras RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339 could allow an remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static password. The Telne...

CVE-2020-25748

A Cleartext Transmission issue was discovered on Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339. Someone in the middle can intercept and modify the video data from the camera, which is transmitted in an unencrypted form. One can also modify responses from NTP and RTSP...

The vulnerability of the Telnet service provided by the microprogramming software for Wi-Fi cameras from Rubetek, models RV-3406, RV-3409, and RV-3411, allows a intruder to gain unauthorized access to the RTSP and ONVIF services.

The vulnerability of the Telnet service provided by the Wi-Fi cameras of Rubetek models RV-3406, RV-3409, and RV-3411 is related to authentication deficiencies. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to RTSP and ONFIV services. This...

CVE-2020-25747

The Telnet service of Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339 can allow a remote attacker to gain access to RTSP and ONFIV services without authentication. Thus, the attacker can watch live streams from the camera, rotate the camera, change some settings...

CVE-2020-25748

A Cleartext Transmission issue was discovered on Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339. Someone in the middle can intercept and modify the video data from the camera, which is transmitted in an unencrypted form. One can also modify responses from NTP and RTSP...

CVE-2020-25749

The Telnet service of Rubetek cameras RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339 could allow an remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static password. The Telne...

CVE-2020-25749

The Telnet service of Rubetek cameras RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339 could allow an remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static password. The Telne...

CVE-2020-25748

A Cleartext Transmission issue was discovered on Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339. Someone in the middle can intercept and modify the video data from the camera, which is transmitted in an unencrypted form. One can also modify responses from NTP and RTSP...

Design/Logic Flaw

A Cleartext Transmission issue was discovered on Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339. Someone in the middle can intercept and modify the video data from the camera, which is transmitted in an unencrypted form. One can also modify responses from NTP and RTSP...

Default credentials

The Telnet service of Rubetek cameras RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339 could allow an remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static password. The Telne...

CVE-2020-25749

The CVE-2020-25749 entry applies to Rubetek RV-3406, RV-3409, and RV-3411 cameras (firmware v342, v339). Root cause: a system account uses a default, static password for Telnet. Consequence: Telnet cannot be disabled and the password cannot be changed via standard functionality, enabling a remote...

CVE-2020-25749

The Telnet service of Rubetek cameras RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339 could allow an remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static password. The Telne...

CVE-2020-25748

A Cleartext Transmission issue was discovered on Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339. Someone in the middle can intercept and modify the video data from the camera, which is transmitted in an unencrypted form. One can also modify responses from NTP and RTSP...

CVE-2020-25747

The Telnet service of Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339 can allow a remote attacker to gain access to RTSP and ONFIV services without authentication. Thus, the attacker can watch live streams from the camera, rotate the camera, change some settings...