Stack overflow

The Amcrest IPM-721S AmcrestIPC-AWXXEngNV2.420.AC00.17.R.20170322 allows HTTP requests that permit enabling various functionalities of the camera by using HTTP APIs, instead of the web management interface that is provided by the application. This HTTP API receives the credentials as base64 encod...

Authentication flaw

Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have a timeout policy to wait for 5 minutes in case 30 incorrect password attempts are detected using the Web and HTTP API interface provided by the device. However, if the same brute force attempt is performed using the ONVIF specification which...

Authorization

On Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices, the users on the device are divided into 2 groups "admin" and "user". However, as a part of security analysis it was identified that a low privileged user who belongs to the "user" group and who has access to login in to the web administrativ...

Authentication flaw

Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to download the administrative credentials. If the firmware version V2.420.AC00.16.R 9/9/2016 is dissected using binwalk tool, one obtains a user-x.squashfs.img.extracted archive which contains the filesystem set...

Design/Logic Flaw

Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices mishandle reboots within the past two hours. Amcrest cloud services does not perform a thorough verification when allowing the user to add a new camera to the user's account to ensure that the user actually owns the camera other than knowing the...

CVE-2017-13719

CVE-2017-13719 affects the Amcrest IPM-721S camera. The HTTP API accepts credentials in the Authorization header, but a missing length check allows a 1024-character password to trigger a stack-based buffer overflow in the credential-checking code (binary “sonia” in /usr). This memory corruption c...

CVE-2017-13719

The Amcrest IPM-721S AmcrestIPC-AWXXEngNV2.420.AC00.17.R.20170322 allows HTTP requests that permit enabling various functionalities of the camera by using HTTP APIs, instead of the web management interface that is provided by the application. This HTTP API receives the credentials as base64 encod...

CVE-2017-8228

Amcrest IPM-721S (V2.420.AC00.16.R.20160909) contains a vulnerability (CVE-2017-8228) where Amcrest cloud verification for adding cameras to a user’s account is insufficient. An attacker who knows a camera’s serial number and the user’s recent reboot window can add another user’s camera to their ...

CVE-2017-8228

Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices mishandle reboots within the past two hours. Amcrest cloud services does not perform a thorough verification when allowing the user to add a new camera to the user's account to ensure that the user actually owns the camera other than knowing the...

CVE-2017-8227

Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have a timeout policy to wait for 5 minutes in case 30 incorrect password attempts are detected using the Web and HTTP API interface provided by the device. However, if the same brute force attempt is performed using the ONVIF specification which...

CVE-2017-8227

Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices expose a credential-bruteforce risk via ONVIF: account lockout is bypassed, allowing credential guesswork and potential takeover. Root cause is a vulnerable ONVIF authentication path in the binary (sonia) that does not enforce the 5-minute timeou...

CVE-2017-8230

On Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices, the users on the device are divided into 2 groups "admin" and "user". However, as a part of security analysis it was identified that a low privileged user who belongs to the "user" group and who has access to login in to the web administrativ...

CVE-2017-8230

The CVE-2017-8230 entry concerns Amcrest IPM-721S devices with firmware V2.420.AC00.16.R.20160909. A low-privilege user can authenticate to the web admin interface and add a new admin account via HTTP APIs, gaining full admin capabilities. The root cause is an authorization bypass in the HTTP API...

CVE-2017-8226

Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have default credentials that are hardcoded in the firmware and can be extracted by anyone who reverses the firmware to identify them. If the firmware version V2.420.AC00.16.R 9/9/2016 is dissected using binwalk tool, one obtains a...

CVE-2017-8226

Technical details about CVE-2017-8226 are not publicly provided in the supplied documents. The materials mention default credentials and vulnerable firmware but do not disclose affected components, versions, or remediation specifics. Monitor for updates.

CVE-2017-8229

Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to download the administrative credentials. If the firmware version V2.420.AC00.16.R 9/9/2016 is dissected using binwalk tool, one obtains a user-x.squashfs.img.extracted archive which contains the filesystem set...

CVE-2017-8229

Amcrest IPM-721S devices (V2.420.AC00.16.R.20160909) are affected by CVE-2017-8229: unauthenticated attackers can download administrative credentials via exposed configuration files (e.g., /current_config) without authentication. The root cause is a misconfigured or exposed current_config path th...

Amcrest Technologies IP Cameras Multiple Vulnerabilities (Jun 2019)

Amcrest Technologies IP Cameras are prone to multiple vulnerabilities. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Critical Flaws in Amcrest HDSeries Camera Allow Complete Takeover

Two critical severity bugs have been publicly disclosed that impact Amcrest HDSeries model IPM-721S cameras. Both vulnerabilities open the consumer-grade $50 Wi-Fi cameras to complete takeover by remote, unauthenticated attackers. Mandar Satam, senior security researcher at Synopsys, found the si...

Amcrest Technologies IP Camera Detection (HTTP)

HTTP based detection of Amcrest SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.114084";...