CVE-2025-53701 XSS vulnerability in Vilar VS-IPC1002 IP cameras

Vilar VS-IPC1002 IP cameras are vulnerable to Reflected XSS Cross-site Scripting attacks, because parameters in GET requests sent to /cgi-bin/action endpoint are not sanitized properly, making it possible to target logged in admin users. The vendor did not respond in any way. Only version 1.1.0.1...

PT-2025-43512

Name of the Vulnerable Software and Affected Versions Vilar VS-IPC1002 IP cameras affected versions not specified Description Vilar VS-IPC1002 IP cameras are susceptible to Reflected Cross-Site Scripting XSS attacks. This occurs because parameters within GET requests sent to the /cgi-bin/action A...

CVE-2025-53701: Improper Neutralization of Input During Web Page Generation

Vilar VS-IPC1002 IP cameras are vulnerable to Reflected XSS Cross-site Scripting attacks, because parameters in GET requests sent to /cgi-bin/action endpoint are not sanitized properly, making it possible to target logged in admin users. The vendor did not respond in any way. Only version 1.1.0.1...

CVE-2025-53702: Improper Handling of Exceptional Conditions

Vilar VS-IPC1002 IP cameras are vulnerable to DoS Denial-of-Service attacks. An unauthenticated attacker on the same local network might send a crafted request to /cgi-bin/action endpoint and render the device completely unresponsive. A manual restart of the device is required. The vendor did not...