CVE-2025-67160

CVE-2025-67160 — Vatilon-based IP Cameras Summary Vatilon-based IP camera firmware exposes multiple internal web directories without requiring authentication. When directory indexing is enabled on the embedded web server, unauthenticated attackers can access directories such as /cgi-bin/, /view/,...

CVE-2025-63667

CVE-2025-63667 — Vatilon-based IP Cameras Vulnerability Evidence Sanitized Summary Several Vatilon-based IP cameras observed brands: SIMICAM, KEVIEW, ASECAM issue Session-Id tokens without verifying credential correctness. This flaw allows unauthenticated attackers to obtain valid sessions and...

CVE-2025-67159

CVE-2025-67159 — Vatilon-based IP Cameras Summary Vatilon-based IP camera firmware contains an authentication bypass and plaintext credential exposure vulnerability in the /cgi-bin/web.cgi API. The web interface processes requests containing username and password parameters in plaintext without...

CVE-2025-67160

An issue in Vatilon v1.12.37-20240124 allows attackers to access sensitive directories and files via a directory traversal...

CVE-2025-67159

Vatilon v1.12.37-20240124 was discovered to transmit user credentials in plaintext...

CVE-2025-67159

Vatilon v1.12.37-20240124 was discovered to transmit user credentials in plaintext...

CVE-2025-67160

An issue in Vatilon v1.12.37-20240124 allows attackers to access sensitive directories and files via a directory traversal...

CVE-2025-67159

Vatilon v1.12.37-20240124 was discovered to transmit user credentials in plaintext...

CVE-2025-67160

An issue in Vatilon v1.12.37-20240124 allows attackers to access sensitive directories and files via a directory traversal...

CVE-2025-67159

Vatilon-based IP cameras (specifically observed brand JIENUO , devtype=PA4) are vulnerable in firmware version v1.12.37-20240124 due to an authentication bypass and plaintext credential exposure . The /cgi-bin/web.cgi API processes username and password parameters in plaintext without validating ...

CVE-2025-67160

An issue in Vatilon v1.12.37-20240124 allows attackers to access sensitive directories and files via a directory traversal...

Vatilon IP Camera security vulnerabilities

Vatilon IP Cameras are a series of IP cameras from China-based Vatilon Vatilon. A security vulnerability exists in Vatilon IP Cameras version v1.12.37-20240124, which stems from susceptibility to directory traversal attacks that could lead to access to sensitive directories and files...

PT-2026-1103

Name of the Vulnerable Software and Affected Versions Vatilon version 1.12.37-20240124 Description An issue allows attackers to access sensitive directories and files via a directory traversal. Recommendations At the moment, there is no information about a newer version that contains a fix for th...

CVE-2025-67159

Vatilon v1.12.37-20240124 was discovered to transmit user credentials in plaintext...

Vatilon-based IP Cameras Authentication Bypass / Credential Exposure

Vatilon-based IP camera firmware contains an authentication bypass and plaintext credential exposure vulnerability in the /cgi-bin/web.cgi API. The web interface processes requests containing username and password parameters in plaintext without validating authentication state or session context,...

CVE-2025-67160

Vatilon-based IP cameras running firmware v1.12.37-20240124 (specifically observed on JIENUO brand devices) are vulnerable to directory traversal and incorrect access control . The embedded web server allows unauthenticated directory indexing on multiple paths, including /cgi-bin/, /view/, /css/,...

CVE-2025-67160: Improper Limitation of a Pathname to a Restricted Directory

An issue in Vatilon v1.12.37-20240124 allows attackers to access sensitive directories and files via a directory traversal...

CVE-2025-67159: Cleartext Transmission of Sensitive Information

Vatilon v1.12.37-20240124 was discovered to transmit user credentials in plaintext...

CVE-2025-67160

An issue in Vatilon v1.12.37-20240124 allows attackers to access sensitive directories and files via a directory traversal...

Vatilon IP Camera security vulnerabilities

Vatilon IP Cameras are a series of IP cameras from China-based Vatilon Vatilon. A security vulnerability exists in Vatilon IP Cameras version v1.12.37-20240124, which originates from transmitting user credentials in clear text...