CVE-2023-27126

The AES Key-IV pair used by the TP-Link TAPO C200 camera V3 EU on firmware version 1.1.22 Build 220725 is reused across all cameras. An attacker with physical access to a camera is able to extract and decrypt sensitive data containing the Wifi password and the TP-LINK account credential of the...

CVE-2023-27126

The AES Key-IV pair used by the TP-Link TAPO C200 camera V3 EU on firmware version 1.1.22 Build 220725 is reused across all cameras. An attacker with physical access to a camera is able to extract and decrypt sensitive data containing the Wifi password and the TP-LINK account credential of the...

CVE-2023-27126

The AES Key-IV pair used by the TP-Link TAPO C200 camera V3 EU on firmware version 1.1.22 Build 220725 is reused across all cameras. An attacker with physical access to a camera is able to extract and decrypt sensitive data containing the Wifi password and the TP-LINK account credential of the...

CVE-2023-27126

CVE-2023-27126 affects the TP-Link TAPO C200 camera V3 (EU) with firmware 1.1.22 Build 220725. The AES Key–IV pair is reused across all cameras, so a physical attacker can extract and decrypt sensitive data (WiFi password and TP-LINK account credential). Public details about a patch or fix are no...

A week in security (May 29 - June 4)

Last week on Malwarebytes Labs: Barracuda Networks patches zero-day vulnerability in Email Security Gateway CISA issues warning to US businesses: Beware of China's state-sponsored cyber actor Microsoft gives Apple a migraine Financial services company OneMain fined $4.25 million for security laps...

CVE-2023-28161

If temporary "one-time" permissions, such as the ability to use the Camera, were granted to a document loaded using a file: URL, that permission persisted in that tab for all other documents loaded from a file: URL. This is potentially dangerous if the local files came from different sources, suc...

CVE-2023-28704

Furbo dog camera has insufficient filtering for special parameter of device log management function. An unauthenticated remote attacker in the Bluetooth network with normal user privileges can exploit this vulnerability to perform command injection attack to execute arbitrary system commands or...

PT-2023-21916 · Unknown · Furbo Dog Camera

Name of the Vulnerable Software and Affected Versions: Furbo dog camera affected versions not specified Description: The issue is related to insufficient filtering for a special parameter in the device log management function. This can be exploited by an unauthenticated remote attacker in the...

CVE-2023-28704

The CVE-2023-28704 entry concerns Furbo dog camera. The root cause is insufficient filtering for a special parameter in the device log management function. An unauthenticated remote attacker on the Bluetooth network with normal user privileges can exploit this to perform a command injection, exec...

Furbo 360° Dog Camera 命令注入漏洞

Furbo 360° Dog Camera is a camera for remote viewing of pet dogs from Furbo. The Furbo 360° Dog Camera suffers from a command injection vulnerability that stems from insufficient filtering of special parameters in the device's log management function, which can be exploited by an unauthenticated,...

CVE-2023-28704 Furbo dog camera - Command Injection

Furbo dog camera has insufficient filtering for special parameter of device log management function. An unauthenticated remote attacker in the Bluetooth network with normal user privileges can exploit this vulnerability to perform command injection attack to execute arbitrary system commands or...

CVE-2023-28704 Furbo dog camera - Command Injection

Furbo dog camera has insufficient filtering for special parameter of device log management function. An unauthenticated remote attacker in the Bluetooth network with normal user privileges can exploit this vulnerability to perform command injection attack to execute arbitrary system commands or...

CVE-2021-45039

Multiple models of the Uniview IP Camera e.g., IPCG6103 B6103.16.10.B25.201218, IPCG61, IPC21, IPC23, IPC32, IPC36, IPC62, and IPCHCMN offer an undocumented UDP service on port 7788 that allows a remote unauthenticated attacker to overflow an internal buffer and achieve code execution. By using...

Buffer overflow

Multiple models of the Uniview IP Camera e.g., IPCG6103 B6103.16.10.B25.201218, IPCG61, IPC21, IPC23, IPC32, IPC36, IPC62, and IPCHCMN offer an undocumented UDP service on port 7788 that allows a remote unauthenticated attacker to overflow an internal buffer and achieve code execution. By using...

CVE-2021-45039

Multiple models of the Uniview IP Camera e.g., IPCG6103 B6103.16.10.B25.201218, IPCG61, IPC21, IPC23, IPC32, IPC36, IPC62, and IPCHCMN offer an undocumented UDP service on port 7788 that allows a remote unauthenticated attacker to overflow an internal buffer and achieve code execution. By using...

PT-2023-12552 · Uniview · Uniview Ip Camera

Name of the Vulnerable Software and Affected Versions: Uniview IP Camera versions prior to the fixed version Description: The issue concerns an undocumented UDP service on port 7788 that allows a remote unauthenticated attacker to overflow an internal buffer and achieve code execution. By...

CVE-2021-45039

Multiple models of the Uniview IP Camera e.g., IPCG6103 B6103.16.10.B25.201218, IPCG61, IPC21, IPC23, IPC32, IPC36, IPC62, and IPCHCMN offer an undocumented UDP service on port 7788 that allows a remote unauthenticated attacker to overflow an internal buffer and achieve code execution. By using...

CVE-2021-45039

The CVE-2021-45039 issue affects Uniview IP Camera models (e.g., IPC_G6103/IPC_G61/IPC21/IPC23/IPC32/IPC36/IPC62/IPC_HCMN). An undocumented UDP service on port 7788 allows a remote unauthenticated attacker to overflow an internal buffer, achieving code execution and enabling the telnetd service. ...

CVE-2023-28704

Furbo dog camera has insufficient filtering for special parameter of device log management function. An unauthenticated remote attacker in the Bluetooth network with normal user privileges can exploit this vulnerability to perform command injection attack to execute arbitrary system commands or...

The vulnerability of the D-Link 825L surveillance camera lies in its use of a weak encryption mechanism, which allows attackers to carry out a “man-in-the-middle” attack.

The vulnerability of the D-Link 825L surveillance camera lies in the use of a weak encryption mechanism. Exploiting this vulnerability could allow an attacker to carry out a Man-in-the-Middle attack...