Path traversal

Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal.This issue affects IP Camera: before b1130.1.0.1...

CVE-2023-6118 Path Traversal in Neutron IP Camera

Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal. This issue affects IP Camera: before b1130.1.0.1...

CVE-2023-6118 Path Traversal in Neutron IP Camera

Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal. This issue affects IP Camera: before b1130.1.0.1...

CVE-2023-6118

CVE-2023-6118 describes a Path Traversal (Absolute Path Traversal) weakness in Neutron IP Camera. The vulnerability allows access to files/directories via the crafted path '/../filedir'. Affected software: Neutron IP Camera versions prior to b1130.1.0.1. Root cause is a path traversal flaw that d...

PT-2023-32526

Name of the Vulnerable Software and Affected Versions Neutron IP Camera versions prior to b1130.1.0.1 Description The issue is related to a Path Traversal vulnerability, allowing Absolute Path Traversal using '/../filedir'. This enables unauthorized access to files on the system. Recommendations...

CVE-2023-6118: Path Traversal: '/../filedir'

Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal. This issue affects IP Camera: before b1130.1.0.1...

Neutron IP Camera Path Traversal Vulnerability

Neutron IP Camera is a series of webcams from Neutron. A security vulnerability exists in versions prior to Neutron IP Camera b1130.1.0.1. An attacker could exploit the vulnerability to access files and directories...

CVE-2023-3103

Authentication bypass vulnerability, the exploitation of which could allow a local attacker to perform a Man-in-the-Middle MITM attack on the robot's camera video stream. In addition, if a MITM attack is carried out, it is possible to consume the robot's resources, which could lead to a...

Authentication flaw

Authentication bypass vulnerability, the exploitation of which could allow a local attacker to perform a Man-in-the-Middle MITM attack on the robot's camera video stream. In addition, if a MITM attack is carried out, it is possible to consume the robot's resources, which could lead to a...

CVE-2023-3104: Missing Authentication for Critical Function

Lack of authentication vulnerability. An unauthenticated local user is able to see through the cameras using the web server due to the lack of any form of authentication...

Unitree Robotics A1 Security Breach

Unitree Robotics A1 is a quadrupedal robot from Chinese company Unitree Robotics. A security vulnerability exists in Unitree Robotics A1 version 1.16, which stems from an authentication bypass vulnerability. This vulnerability can be exploited by a local attacker to conduct a man-in-the-middle MI...

PT-2023-23115 · Robot · Robot

Name of the Vulnerable Software and Affected Versions: Robot affected versions not specified Description: The issue allows a local attacker to bypass authentication and perform a Man-in-the-Middle MITM attack on the robot's camera video stream. This could lead to the consumption of the robot's...

PT-2023-23118 · Unitreerobotics +1 · A1 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to a lack of authentication, allowing an unauthenticated local user to access cameras through the web server without any form of authentication. Recommendations...

CVE-2023-6248 Data leakage and arbitrary remote code execution in Syrus cloud devices

The Syrus4 IoT gateway utilizes an unsecured MQTT server to download and execute arbitrary commands, allowing a remote unauthenticated attacker to execute code on any Syrus4 device connected to the cloud service. The MQTT server also leaks the location, video and diagnostic data from each connect...

CVE-2023-6248 Data leakage and arbitrary remote code execution in Syrus cloud devices

The Syrus4 IoT gateway utilizes an unsecured MQTT server to download and execute arbitrary commands, allowing a remote unauthenticated attacker to execute code on any Syrus4 device connected to the cloud service. The MQTT server also leaks the location, video and diagnostic data from each connect...

ELECOM Camera Assistant QuickFileDealer Privilege Escalation

The vulnerability of the software for the effective use of the ELECOM Camera Assistant and the software for increasing file transfer speed, QuickFileDealer, is related to the use of an unreliable search path. Exploiting this vulnerability can allow a hacker to increase their privileges...

kernel: media: uvcvideo: Handle cameras with invalid descriptors

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Handle cameras with invalid descriptors If the source entity does not contain any pads, do not create a link...

LibRaw Process Canon Camera Info Confidential Data Compromise

The vulnerability of the processCanonCameraInfo function in the LibRaw image processing library is related to the output of operations that go beyond buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity,...

Intel RealSense Dynamic Calibration Security Vulnerability

Intel RealSense Dynamic Calibration is part of Intel RealSense technology from Intel Corporation USA and is used to calibrate cameras and depth sensors in real time. A security vulnerability exists in Intel RealSense Dynamic Calibration. An attacker exploiting this vulnerability could cause an...

CVE-2023-5037

badmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the camera. An attacker could inject malicious into request packets to execute command. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for...