Race condition

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition in a Camera driver can lead to a Use After Free condition...

Race condition

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a camera driver function, a race condition exists which can lead to a Use After Free condition...

CVE-2017-11045

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a camera driver function, a race condition exists which can lead to a Use After Free condition...

CVE-2017-9708

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the camera driver, the function "msmoispowerdown" is called without a mutex and a race condition can occur in variable "regptr" of sub function "msmcameraconfigsinglevreg"...

CVE-2017-9703

CVE-2017-9703 is a race condition in a Camera driver on Android for MSM, Firefox OS for MSM, and QRD Android (CAF Linux kernel). This Use-After-Free vulnerability is rated CVSS v3.0 base score 7.0 (HIGH) with LOCAL attack vector, high impact on confidentiality, integrity, and availability; CVSS v...

CVE-2017-9708

The CVE-2017-9708 issue affects Android for MSM (and related CAF builds) in the camera driver. The race condition stems from msm_ois_power_down being invoked without a mutex, causing a race in the *reg_ptr variable within msm_camera_config_single_vreg. Impact is described as a race condition with...

CVE-2017-9703

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition in a Camera driver can lead to a Use After Free condition...

Shodanwave - Exploring and Obtaining Information from Netwave IP Camera

Shodanwave is a tool for exploring and obtaining information from cameras specifically Netwave IP Camera. The tool uses a search engine called shodan that makes it easy to search for cameras online. What does the tool to? Look, a list! Search Brute force SSID and WPAPSK Password Disclosure E-mail...

Intelligent high-definition network dome camera of Changzhou Shuoxin Electronic Technology Co.

Intelligent high-definition network dome camera is a surveillance equipment of Changzhou ShuoXin Electronic Technology Co. Intelligent HD Network Dome Camera of Changzhou ShuoXin Electronic Technology Co., Ltd. suffers from an arbitrary file download vulnerability. An attacker can exploit this...

Denial of Service Vulnerability in Multiple Huawei Products (CNVD-2017-35593)

The Huawei EVA series and VIE series are both smartphone products from the Chinese company Huawei. A denial-of-service vulnerability exists in multiple Huawei products, which can be successfully exploited by attackers to cause the camera application to be unavailable by tricking users into...

HikVision Wi-Fi IP Camera Wireless Access Point State Vulnerability

HikVision Wi-Fi IP cameras come with a default SSID "davinci", with a setting of no WiFi encryption or authentication. Depending on the firmware version, there is no configuration option within the camera to turn off Wi-Fi. If a camera is deployed via wired ethernet, then the WiFi settings won't ...

CVE-2017-9315

Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised and subsequently utilized by...

Design/Logic Flaw

Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised and subsequently utilized by...

CVE-2017-9315

Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised and subsequently utilized by...

CVE-2017-9315

The CVE-2017-9315 entry concerns Dahua IP cameras/IP PTZ with a weak admin-password recovery mechanism. According to the provided description and related sources, a user who submits device information could obtain a time-limited temporary password from a Dahua dealer to reset the admin password, ...

HikVision Wi-Fi IP Camera Wireless Access Point State

Hikvision Wi-Fi IP Cameras associate to a default unencrypted rogue SSIDs in a wired configuration Full disclosure Nov 27, 2017 Synopsis: --- HikVision Wi-Fi IP cameras come with a default SSID "davinci", with a setting of no WiFi encryption or authentication. Depending on the firmware version,...

Arbitrary File Download Vulnerability in the Pelco Sarix Pro Webcam ssldownload.cgi Program

pelco Sarix Professional is a video camera. An arbitrary file download vulnerability exists in the pelco Sarix Pro network camera ssldownload.cgi program. The vulnerability is caused due to the program failing to properly check the path and name of the downloaded file, allowing an attacker to...

Weak Password Vulnerability in WEB Management Interface of Pelco Sarix Pro Network Camera

pelco Sarix Professional is a video camera. A weak password vulnerability exists in the WEB management interface of the pelco Sarix Pro network camera. An attacker can obtain a hidden administrative account and use this account to perform any background operation, gain administrative privileges,...

Command execution vulnerability in the pelco Sarix Pro network camera set_param program (CNVD-2017-36493)

pelco Sarix Professional is a video camera. A command execution vulnerability exists in the pelco Sarix Pro network camera setparam program. The vulnerability is caused due to the program not performing security checks on user-submitted parameters, allowing an attack to take full control of the...

Arbitrary File Deletion Vulnerability in the Pelco Sarix Pro Webcam set_param Program

pelco Sarix Professional is a video camera. An arbitrary file deletion vulnerability exists in the pelco Sarix Pro webcam setparam program. The vulnerability is caused due to the program not checking filenames when processing parameters, which can be exploited by an attacker to delete arbitrary...