Directory Traversal Vulnerability in Huijitong Cloud Vision of Beijing Zhongchuang Vision Technology Co.

Huijitong CloudVision is an operation-level cloud video platform developed by Beijing Zhongchuang Vision Technology Co., Ltd, which can simultaneously satisfy the zero distance of enterprise communication and collaboration. A directory traversal vulnerability exists in Huijitong CloudVision, whic...

Arbitrary File Download Vulnerability in Basic Platform Management System of Beijing Zhongchuang Vision Technology Co.

The business scope of Beijing Zhongchuang Vision Technology Co., Ltd. includes: technology development of communication equipment; technology development, technology transfer, technology consulting and technology service of electronic products; software development; sales of communication...

Information Leakage Vulnerability in HIM Basic Platform Management System of Beijing Zhongchuang Vision Technology Co.

Ltd. is a high-tech company specializing in the research and development of video conference system hardware and software. There is an information leakage vulnerability in the management system of the HIM infrastructure platform of Beijing CCTV Technology Co. Ltd, which can be exploited by...

Logic Flaw Vulnerability in the Basic Platform Management System of Beijing Zhongchuang Vision Technology Co.

Ltd. is a high-tech company specializing in the research and development of video conference system hardware and software. A logic flaw exists in the management system of the basic platform of Beijing Zhongchuang Vision Technology Co. An attacker can exploit the vulnerability by replacing the...

Catalog Traversal Vulnerability in HIM Basic Management Platform of Beijing Zhongchuang Vision Technology Co.

Ltd. is a high-tech company specializing in the research and development of video conference system hardware and software. There is a directory traversal vulnerability in the HIM base management platform of Beijing CCTV Technology Co., Ltd. that can be exploited by an attacker to traverse any...

Arbitrary File Read Vulnerability in HIM Basic Management Platform of Beijing Zhongchuang Vision Technology Co.

Ltd. is a high-tech company specializing in the research and development of video conference system hardware and software. There is an arbitrary file reading vulnerability in the HIM basic management platform of Beijing CCTV Technology Co., Ltd, which can be exploited by an attacker to read all t...

Weak Password Vulnerability in eVision Camera

Located in Shenzhen, Guangdong, China, E-Vision Technology is a company that mainly deals with digital cameras. A weak password vulnerability exists in EaseUS cameras, which can be exploited by an attacker to remotely connect to and control the camera...

Arbitrary File Download Vulnerability in UCM Collaborative Communication Platform of Beijing Zhongchuang Vision Technology Co.

UCM Collaborative Communication Platform is a SIP communication control hardware device, which can realize traditional video conference system terminal registration, multi-party conference MCU, device management, firewall traversal and so on. There is an arbitrary file download vulnerability in t...

CVE-2020-9529

Firmware developed by Shenzhen Hichip Vision Technology V6 through V20, as used by many different vendors in millions of Internet of Things devices, suffers from a privilege escalation vulnerability that allows attackers on the local network to reset the device's administrator password. This...

CVE-2020-9527

Firmware developed by Shenzhen Hichip Vision Technology V6 through V20, after 2018-08-09 through 2020, as used by many different vendors in millions of Internet of Things devices, suffers from buffer overflow vulnerability that allows unauthenticated remote attackers to execute arbitrary code via...

Buffer overflow

Firmware developed by Shenzhen Hichip Vision Technology V6 through V20, after 2018-08-09 through 2020, as used by many different vendors in millions of Internet of Things devices, suffers from buffer overflow vulnerability that allows unauthenticated remote attackers to execute arbitrary code via...

Code injection

Firmware developed by Shenzhen Hichip Vision Technology V6 through V20, as used by many different vendors in millions of Internet of Things devices, suffers from cryptographic issues that allow remote attackers to access user session data, as demonstrated by eavesdropping on user video/audio...

Privilege escalation

Firmware developed by Shenzhen Hichip Vision Technology V6 through V20, as used by many different vendors in millions of Internet of Things devices, suffers from a privilege escalation vulnerability that allows attackers on the local network to reset the device's administrator password. This...

CVE-2020-9529

Firmware developed by Shenzhen Hichip Vision Technology V6 through V20, as used by many different vendors in millions of Internet of Things devices, suffers from a privilege escalation vulnerability that allows attackers on the local network to reset the device's administrator password. This...

CVE-2020-9528

Firmware developed by Shenzhen Hichip Vision Technology V6 through V20, as used by many different vendors in millions of Internet of Things devices, suffers from cryptographic issues that allow remote attackers to access user session data, as demonstrated by eavesdropping on user video/audio...

CVE-2020-9527

Firmware developed by Shenzhen Hichip Vision Technology V6 through V20, after 2018-08-09 through 2020, as used by many different vendors in millions of Internet of Things devices, suffers from buffer overflow vulnerability that allows unauthenticated remote attackers to execute arbitrary code via...

PT-2020-20719

Name of the Vulnerable Software and Affected Versions Firmware developed by Shenzhen Hichip Vision Technology versions V6 through V20 Description The firmware suffers from a privilege escalation issue that allows attackers on the local network to reset the device's administrator password. This...

CVE-2020-9529: Undefined Security Weakness

Firmware developed by Shenzhen Hichip Vision Technology V6 through V20, as used by many different vendors in millions of Internet of Things devices, suffers from a privilege escalation vulnerability that allows attackers on the local network to reset the device's administrator password. This...

PT-2020-20717

Name of the Vulnerable Software and Affected Versions Firmware developed by Shenzhen Hichip Vision Technology versions V6 through V20 Description The firmware suffers from a buffer overflow issue that allows unauthenticated remote attackers to execute arbitrary code via the peer-to-peer P2P...

CVE-2020-9528: Use of a Broken or Risky Cryptographic Algorithm

Firmware developed by Shenzhen Hichip Vision Technology V6 through V20, as used by many different vendors in millions of Internet of Things devices, suffers from cryptographic issues that allow remote attackers to access user session data, as demonstrated by eavesdropping on user video/audio...