CVE-2020-3448: Improper Access Control

A vulnerability in an access control mechanism of Cisco Cyber Vision Center Software could allow an unauthenticated, remote attacker to bypass authentication and access internal services that are running on an affected device. The vulnerability is due to insufficient enforcement of access control...

CVE-2020-9527

Firmware developed by Shenzhen Hichip Vision Technology V6 through V20, after 2018-08-09 through 2020, as used by many different vendors in millions of Internet of Things devices, suffers from buffer overflow vulnerability that allows unauthenticated remote attackers to execute arbitrary code via...

CVE-2020-9528

Firmware developed by Shenzhen Hichip Vision Technology V6 through V20, as used by many different vendors in millions of Internet of Things devices, suffers from cryptographic issues that allow remote attackers to access user session data, as demonstrated by eavesdropping on user video/audio...

CVE-2020-9528

Firmware developed by Shenzhen Hichip Vision Technology V6 through V20, as used by many different vendors in millions of Internet of Things devices, suffers from cryptographic issues that allow remote attackers to access user session data, as demonstrated by eavesdropping on user video/audio...

CVE-2020-9527

Firmware developed by Shenzhen Hichip Vision Technology V6 through V20, after 2018-08-09 through 2020, as used by many different vendors in millions of Internet of Things devices, suffers from buffer overflow vulnerability that allows unauthenticated remote attackers to execute arbitrary code via...

CVE-2020-9527

Firmware developed by Shenzhen Hichip Vision Technology V6 through V20, after 2018-08-09 through 2020, as used by many different vendors in millions of Internet of Things devices, suffers from buffer overflow vulnerability that allows unauthenticated remote attackers to execute arbitrary code via...

CVE-2020-9529

Firmware developed by Shenzhen Hichip Vision Technology V6 through V20, as used by many different vendors in millions of Internet of Things devices, suffers from a privilege escalation vulnerability that allows attackers on the local network to reset the device's administrator password. This...

CVE-2020-9528

Firmware developed by Shenzhen Hichip Vision Technology V6 through V20, as used by many different vendors in millions of Internet of Things devices, suffers from cryptographic issues that allow remote attackers to access user session data, as demonstrated by eavesdropping on user video/audio...

Code injection

Firmware developed by Shenzhen Hichip Vision Technology V6 through V20, as used by many different vendors in millions of Internet of Things devices, suffers from cryptographic issues that allow remote attackers to access user session data, as demonstrated by eavesdropping on user video/audio...

Buffer overflow

Firmware developed by Shenzhen Hichip Vision Technology V6 through V20, after 2018-08-09 through 2020, as used by many different vendors in millions of Internet of Things devices, suffers from buffer overflow vulnerability that allows unauthenticated remote attackers to execute arbitrary code via...

Privilege escalation

Firmware developed by Shenzhen Hichip Vision Technology V6 through V20, as used by many different vendors in millions of Internet of Things devices, suffers from a privilege escalation vulnerability that allows attackers on the local network to reset the device's administrator password. This...

CVE-2020-9529

Firmware developed by Shenzhen Hichip Vision Technology V6 through V20, as used by many different vendors in millions of Internet of Things devices, suffers from a privilege escalation vulnerability that allows attackers on the local network to reset the device's administrator password. This...

CVE-2020-9529

CVE-2020-9529 affects firmware by Shenzhen Hichip Vision Technology (V6–V20) used in numerous brands (e.g., Accfly, Anlink, D3D Security, Tenvis, ZILINK, etc.). The vulnerability enables privilege escalation from the local network, allowing an attacker to reset the device administrator password. ...

CVE-2020-9528

Firmware developed by Shenzhen Hichip Vision Technology V6 through V20, as used by many different vendors in millions of Internet of Things devices, suffers from cryptographic issues that allow remote attackers to access user session data, as demonstrated by eavesdropping on user video/audio...

CVE-2020-9528

CVE-2020-9528 involves firmware from Shenzhen Hichip Vision Technology (V6–V20) used across multiple IoT devices. The reported issue is cryptographic in nature and enables remote attackers to access user session data, demonstrated by eavesdropping on video/audio streams, capturing credentials, an...

CVE-2020-9527

Firmware developed by Shenzhen Hichip Vision Technology V6 through V20, after 2018-08-09 through 2020, as used by many different vendors in millions of Internet of Things devices, suffers from buffer overflow vulnerability that allows unauthenticated remote attackers to execute arbitrary code via...

CVE-2020-9527

CVE-2020-9527 concerns firmware by Shenzhen Hichip Vision Technology (V6–V20, post-2018-08-09 to 2020) used across many IoT devices under numerous brands. The vulnerability is a buffer overflow in the P2P service that allows unauthenticated remote attackers to execute arbitrary code. Affected pro...

PT-2020-20719

Name of the Vulnerable Software and Affected Versions Firmware developed by Shenzhen Hichip Vision Technology versions V6 through V20 Description The firmware suffers from a privilege escalation issue that allows attackers on the local network to reset the device's administrator password. This...

PT-2020-20717

Name of the Vulnerable Software and Affected Versions Firmware developed by Shenzhen Hichip Vision Technology versions V6 through V20 Description The firmware suffers from a buffer overflow issue that allows unauthenticated remote attackers to execute arbitrary code via the peer-to-peer P2P...

PT-2020-20718

Name of the Vulnerable Software and Affected Versions Firmware developed by Shenzhen Hichip Vision Technology versions V6 through V20 Description The firmware suffers from cryptographic issues, allowing remote attackers to access user session data. This can be demonstrated by eavesdropping on use...