Brickcom多款产品 访问控制错误漏洞

Brickcom Cube, among others, are products of the Brickcom company. The Brickcom Cube is a series of indoor network surveillance cameras. The Brickcom Dome is a series of hemispherical network surveillance cameras. The Brickcom Bullet is a series of gun-type network surveillance cameras. Several o...

VulnCheck KEV: CVE-2020-11625

An issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438. Failed web UI login attempts elicit different responses depending on whether a user account exists. Because the responses indicate wheth...

Design/Logic Flaw

An issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438. An attacker with physical access to the UART interface could access additional diagnostic and configuration functionalities as well as t...

CVE-2020-11625

The AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and AvertX Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438 are vulnerable to username enumeration via the web UI. The ISAPI/Security/sessionLogin/capabilities endpoint returns a salt value for existing usernames ...

CVE-2020-11624

Technical details about CVE-2020-11624 are not publicly provided in the supplied documents. Monitor for updates and advisories for AvertX cameras (HD838/HD438) to obtain concrete impact and remediation information.

CVE-2020-11624: Weak Password Requirements

An issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438. They do not require users to change the default password for the admin account. They only show a pop-up window suggesting a change but...

CVE-2020-11625: Observable Discrepancy

An issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438. Failed web UI login attempts elicit different responses depending on whether a user account exists. Because the responses indicate wheth...

PT-2020-12734

Name of the Vulnerable Software and Affected Versions AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 affected versions not specified AvertX Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438 affected versions not specified Description The issue concerns the lack of...

CVE-2020-11623: Undefined Security Weakness

An issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438. An attacker with physical access to the UART interface could access additional diagnostic and configuration functionalities as well as t...

CVE-2019-7315

CVE-2019-7315 affects Genie Access WIP3BVAF WISH IP 3MP IR Auto Focus Bullet Camera devices running 3.x. The connected Nuclei template documents a Local File Inclusion (LFI) vulnerability exposed via the web interface, enabling an attacker to read sensitive files (demonstrated with /etc/shadow). ...

PT-2019-18524

Name of the Vulnerable Software and Affected Versions Genie Access WIP3BVAF WISH IP 3MP IR Auto Focus Bullet Camera versions prior to 4.x Description The issue allows directory traversal via the web interface, as demonstrated by reading /etc/shadow. This product is discontinued, and its final...

CVE-2019-7315: Improper Limitation of a Pathname to a Restricted Directory

Genie Access WIP3BVAF WISH IP 3MP IR Auto Focus Bullet Camera devices through 3.x are vulnerable to directory traversal via the web interface, as demonstrated by reading /etc/shadow. NOTE: this product is discontinued, and its final firmware version has this vulnerability 4.x versions exist only...