CVE-2025-67159

Vatilon v1.12.37-20240124 was discovered to transmit user credentials in plaintext...

CVE-2025-67160

Vatilon IP Cameras running firmware v1.12.37-20240124 are vulnerable to a directory traversal issue caused by incorrect access control. The integrated web server allows unauthenticated attackers to access internal directories such as /cgi-bin/, /view/, /css/, /img/, /img2/, /js/, /js2/, and /onvi...

Vatilon IP Cameras 安全漏洞

Vatilon IP Cameras are a series of IP cameras from China-based Vatilon Vatilon. A security vulnerability exists in Vatilon IP Cameras version v1.12.37-20240124, which stems from susceptibility to directory traversal attacks that could lead to access to sensitive directories and files...

CVE-2025-67159

Vatilon v1.12.37-20240124 was discovered to transmit user credentials in plaintext...

CVE-2025-67159

Vatilon-based IP cameras (specifically observed brands like JIENUO with devtype=PA4) are vulnerable in firmware version V1.12.37-20240124 due to an authentication bypass and plaintext credential exposure in the /cgi-bin/web.cgi API. The web interface fails to validate authentication states or ses...