CVE-2024-13892

Smartwares cameras CIP-37210AT and C724IP, as well as others which share the same firmware in versions up to 3.3.0, are vulnerable to command injection. During the initialization process, a user has to use a mobile app to provide devices with Access Point credentials. This input is not properly...

CVE-2024-13893

Smartwares cameras CIP-37210AT and C724IP, as well as others which share the same firmware in versions up to 3.3.0, might share same credentials for telnet service. Hash of the password can be retrieved through physical access to SPI connected memory. For the telnet service to be enabled, the...

CVE-2024-38311

creationtimestamp| type| source ---|---|--- 2025-03-06 14:14:42+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114115902257488846 2025-03-06 15:30:46+00:00| seen| https://t.me/cvedetector/19702 2025-03-06 15:44:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljptl2avit...

CVE-2024-13894 Path traversal in Smartwares cameras

Smartwares cameras CIP-37210AT and C724IP, as well as others which share the same firmware in versions up to 3.3.0, are vulnerable to path traversal. When an affected device is connected to a mobile app, it opens a port 10000 enabling a user to download pictures shot at specific moments by...

CVE-2024-13893

Summary of CVE-2024-13892 / CVE-2024-13893 / CVE-2024-13894 (Smartwares CIP-37210AT, C724IP and similar firmware up to 3.3.0): CVE-2024-13892 (NVD/Red Hat): Command injection vulnerability during initialization when a mobile app provides AP credentials. Input is not properly sanitized. Patch stat...

CVE-2024-13892 Command Injection in Smartwares cameras

Smartwares cameras CIP-37210AT and C724IP, as well as others which share the same firmware in versions up to 3.3.0, are vulnerable to command injection. During the initialization process, a user has to use a mobile app to provide devices with Access Point credentials. This input is not properly...

CVE-2025-1696

creationtimestamp| type| source ---|---|--- 2025-03-06 12:33:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6667 2025-03-06 15:30:39+00:00| seen| https://t.me/cvedetector/19697 2025-08-18 13:31:23+00:00| seen| MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3 2025-08-19 02:47:43+00:00| seen|...

CVE-2025-20910

creationtimestamp| type| source ---|---|--- 2025-03-06 05:36:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6634 2025-03-08 04:34:09+00:00| seen| Telegram/nsZx3cLLZChTegwmrc23s1xmnXYtYAuhB50yjIxICO4SovIF...

CVE-2025-20932

creationtimestamp| type| source ---|---|--- 2025-03-06 05:35:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljorizekt32a 2025-03-06 05:36:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6637 2025-03-06 07:09:12+00:00| seen| https://t.me/cvedetector/19672...

CVE-2025-20930

creationtimestamp| type| source ---|---|--- 2025-03-06 05:35:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljoriz4ing2o 2025-03-06 05:36:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6639 2025-03-06 07:09:10+00:00| seen| https://t.me/cvedetector/19669...

CVE-2025-25012

creationtimestamp| type| source ---|---|--- 2025-03-06 04:35:53+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3ljoo73xra22j 2025-03-06 06:11:01+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3ljotjeyg422l 2025-03-06 11:33:00+00:00| seen|...

CVE-2025-27654

creationtimestamp| type| source ---|---|--- 2025-03-06 02:16:26+00:00| seen| Telegram/vYAys4OoqUz2BTXBm6vR6DpOar5qII0e3eTcF6fZRCF94pO...

CVE-2025-27646

creationtimestamp| type| source ---|---|--- 2025-03-06 00:00:16+00:00| seen| https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6s7u3mn26 2025-03-06 02:16:25+00:00| seen| Telegram/ld8gimESoyPTVoNxqAdkp43sLq7ZoV03kioiho87ggSdRKVt 2025-03-06 12:00:10+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2024-53173

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSv4.0: Fix a use-after-free problem in the asynchronous open Yang Erkun reports that when two threads are opening files at the same time, and are forced to...

Linux Distros Unpatched Vulnerability : CVE-2024-50257

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfilter: Fix use-after-free in getinfo ip6tablenat module unload has refcnt warning for UA...

PT-2025-25841

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the rseq feature. The issue occurs when the rseq cs field is non-zero during registration, which can cause a segfault on...

Linux Distros Unpatched Vulnerability : CVE-2024-49906

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Check null pointer before try to access it why & how Change the order of the pipectx-planestate check to ensure that planestate is not null...

Linux Distros Unpatched Vulnerability : CVE-2024-56752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gr/gf100: Fix missing unlock in gf100grchannew When the call to gf100grctxgenera...

Linux Distros Unpatched Vulnerability : CVE-2024-56652

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/xe/regsr: Remove register pool That pool implementation doesn't really work: if the...

Linux Distros Unpatched Vulnerability : CVE-2024-53153

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: PCI: qcom-ep: Move controller cleanups to qcompcieperstdeassert Currently, the endpoint...