24 matches found
CVE-2025-67160
CVE-2025-67160 — Vatilon 기반 IP 카메라 요약 Vatilon 기반 IP 카메라 펌웨어는 인증 없이 여러 내부 웹 디렉터리에 접근할 수 있도록 노출합니다. 포함된 웹 서버에서 디렉터리 인덱싱이 활성화되어 있을 경우, 인증되지 않은 공격자는 /cgi-bin/, /view/, /css/, /img/, /img2/, /js/, /js2/, /onvif/ 등의 디렉터리에 접근하여 내부 스크립트, 구성 페이지 및 민감한 구현 세부 정보를 확인할 수 있습니다. 이러한 노출로 공격자는 웹 인터페이스의 내부 구조를 연구할...
CVE-2025-63667
CVE-2025-63667 — Vatilon 기반 IP 카메라 취약점 증거 정제됨 요약 여러 Vatilon 기반 IP 카메라확인된 브랜드: SIMICAM, KEVIEW, ASECAM에서 Session-Id 토큰을 자격 증명 검증 없이 발급하는 결함이 있습니다. 이 취약점을 통해 인증되지 않은 공격자가 유효한 세션을 획득하고 노출된 API 엔드포인트를 통해 평문 계정 자격 증명과 같은 관리 데이터에 접근할 수 있습니다. 취약점 유형: 접근 제어 불충분 / 부적절한 인증 영향: 원격 정보 노출, 권한 상승 CVSS v3.1: 7....
CVE-2025-67159
CVE-2025-67159 — Vatilon 기반 IP 카메라 요약 Vatilon 기반 IP 카메라 펌웨어는 /cgi-bin/web.cgi API에서 인증 우회 및 평문 자격 증명 노출 취약점 을 포함하고 있습니다. 웹 인터페이스는 인증 상태나 세션 컨텍스트를 확인하지 않고 username 및 password 파라미터를 포함한 요청을 평문으로 처리하여, 인증되지 않은 공격자가 민감한 장치 정보 및 관리 데이터를 검색할 수 있도록 합니다. 취약점 유형: 잘못된 접근 제어 / 부적절한 인증 영향: 원격 정보 노출, 권한 상승 CV...
CVE-2025-67159
Vatilon v1.12.37-20240124 was discovered to transmit user credentials in plaintext...
CVE-2025-67160
An issue in Vatilon v1.12.37-20240124 allows attackers to access sensitive directories and files via a directory traversal...
CVE-2025-67160
An issue in Vatilon v1.12.37-20240124 allows attackers to access sensitive directories and files via a directory traversal...
CVE-2025-67159
Vatilon v1.12.37-20240124 was discovered to transmit user credentials in plaintext...
CVE-2025-67159
Vatilon v1.12.37-20240124 was discovered to transmit user credentials in plaintext...
CVE-2025-67160
An issue in Vatilon v1.12.37-20240124 allows attackers to access sensitive directories and files via a directory traversal...
CVE-2025-67159: Cleartext Transmission of Sensitive Information
Vatilon v1.12.37-20240124 was discovered to transmit user credentials in plaintext...
CVE-2025-67159
Vatilon v1.12.37-20240124 was discovered to transmit user credentials in plaintext...
Vatilon IP Cameras 安全漏洞
Vatilon IP Cameras are a series of IP cameras from China-based Vatilon Vatilon. A security vulnerability exists in Vatilon IP Cameras version v1.12.37-20240124, which stems from susceptibility to directory traversal attacks that could lead to access to sensitive directories and files...
CVE-2025-67160
Vatilon-based IP cameras running firmware v1.12.37-20240124 (specifically observed on JIENUO brand devices) are vulnerable to directory traversal and incorrect access control . The embedded web server allows unauthenticated directory indexing on multiple paths, including /cgi-bin/, /view/, /css/,...
PT-2026-1105
Name of the Vulnerable Software and Affected Versions Vatilon version 1.12.37-20240124 Description The software transmits user credentials in plaintext. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...
CVE-2025-67160: Improper Limitation of a Pathname to a Restricted Directory
An issue in Vatilon v1.12.37-20240124 allows attackers to access sensitive directories and files via a directory traversal...
CVE-2025-67159
Vatilon v1.12.37-20240124 was discovered to transmit user credentials in plaintext...
CVE-2025-67160
An issue in Vatilon v1.12.37-20240124 allows attackers to access sensitive directories and files via a directory traversal...
Vatilon IP Cameras 安全漏洞
Vatilon IP Cameras are a series of IP cameras from China-based Vatilon Vatilon. A security vulnerability exists in Vatilon IP Cameras version v1.12.37-20240124, which originates from transmitting user credentials in clear text...
Vatilon-based IP Cameras Authentication Bypass / Credential Exposure
Vatilon-based IP camera firmware contains an authentication bypass and plaintext credential exposure vulnerability in the /cgi-bin/web.cgi API. The web interface processes requests containing username and password parameters in plaintext without validating authentication state or session context,...