Session fixation

An issue was discovered on Wireless IP Camera 360 devices. A root account with a known SHA-512 password hash exists, which makes it easier for remote attackers to obtain administrative access via a TELNET session...

CVE-2017-11632

CVE-2017-11632 affects Wireless IP Camera 360 devices. A root account exists with a known SHA-512 password hash, enabling remote attackers to obtain administrative access via TELNET. Multiple connected sources corroborate the root-privilege risk and remote TELNET vector, with high-severity impact...

CVE-2017-11635: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered on Wireless IP Camera 360 devices. Attackers can read recordings by navigating to /mnt/idea0 or /mnt/idea1 on the SD memory card...

PT-2018-5330

Name of the Vulnerable Software and Affected Versions Wireless IP Camera 360 devices affected versions not specified Description An issue allows remote attackers to discover RTSP credentials by connecting to TCP port 9527 and reading the InsertConnect field. Recommendations At the moment, there i...

PT-2018-5332

Name of the Vulnerable Software and Affected Versions Wireless IP Camera 360 affected versions not specified Description An issue allows attackers to read recordings by navigating to API Endpoints: "/mnt/idea0" or "/mnt/idea1" on the SD memory card. Recommendations At the moment, there is no...

PT-2018-5329

Name of the Vulnerable Software and Affected Versions Wireless IP Camera 360 devices affected versions not specified Description An issue exists where a root account with a known SHA-512 password hash is present, making it easier for remote attackers to obtain administrative access via a TELNET...

PT-2018-5331

Name of the Vulnerable Software and Affected Versions Wireless IP Camera 360 affected versions not specified Description An issue allows remote attackers to discover a weakly encoded admin password by connecting to TCP port 9527 and reading the password field of the debugging information. For...

CVE-2017-11633: Undefined Security Weakness

An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover RTSP credentials by connecting to TCP port 9527 and reading the InsertConnect field...

CVE-2017-11634: Use of Hard-coded Credentials

An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover a weakly encoded admin password by connecting to TCP port 9527 and reading the password field of the debugging information, e.g., nTBCS19C corresponds to a password of 123456...

CVE-2017-11632: Use of Hard-coded Credentials

An issue was discovered on Wireless IP Camera 360 devices. A root account with a known SHA-512 password hash exists, which makes it easier for remote attackers to obtain administrative access via a TELNET session...