PT-2023-29471 · Huddly · Huddlycameraservice

Name of the Vulnerable Software and Affected Versions: Huddly HuddlyCameraService versions prior to 8.0.7, excluding version 7.99 Description: An issue in HuddlyCameraService allows attackers to manipulate files and escalate privileges via the RollingFileAppender.DeleteFile method performed by th...

Huddly Camera Service Security Vulnerability

Huddly Camera Service is a connected camera technology from Huddly, Inc. in the United States. A security vulnerability exists in Huddly Camera Service versions prior to 8.0.7 excluding version 7.99 that originates from a vulnerability that allows an attacker to manipulate files and elevate...

PUB-A-288366554

In the Pixel Camera Driver, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-6118

Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal.This issue affects IP Camera: before b1130.1.0.1...

CVE-2023-6118

Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal. This issue affects IP Camera: before b1130.1.0.1...

CVE-2023-6118

Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal. This issue affects IP Camera: before b1130.1.0.1...

Path traversal

Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal.This issue affects IP Camera: before b1130.1.0.1...

CVE-2023-6118 Path Traversal in Neutron IP Camera

Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal. This issue affects IP Camera: before b1130.1.0.1...

CVE-2023-6118 Path Traversal in Neutron IP Camera

Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal. This issue affects IP Camera: before b1130.1.0.1...

CVE-2023-6118

CVE-2023-6118 describes a Path Traversal (Absolute Path Traversal) weakness in Neutron IP Camera. The vulnerability allows access to files/directories via the crafted path '/../filedir'. Affected software: Neutron IP Camera versions prior to b1130.1.0.1. Root cause is a path traversal flaw that d...

PT-2023-32526

Name of the Vulnerable Software and Affected Versions Neutron IP Camera versions prior to b1130.1.0.1 Description The issue is related to a Path Traversal vulnerability, allowing Absolute Path Traversal using '/../filedir'. This enables unauthorized access to files on the system. Recommendations...

Neutron IP Camera Path Traversal Vulnerability

Neutron IP Camera is a series of webcams from Neutron. A security vulnerability exists in versions prior to Neutron IP Camera b1130.1.0.1. An attacker could exploit the vulnerability to access files and directories...

CVE-2023-3103

Authentication bypass vulnerability, the exploitation of which could allow a local attacker to perform a Man-in-the-Middle MITM attack on the robot's camera video stream. In addition, if a MITM attack is carried out, it is possible to consume the robot's resources, which could lead to a...

Authentication flaw

Authentication bypass vulnerability, the exploitation of which could allow a local attacker to perform a Man-in-the-Middle MITM attack on the robot's camera video stream. In addition, if a MITM attack is carried out, it is possible to consume the robot's resources, which could lead to a...

PT-2023-23115 · Robot · Robot

Name of the Vulnerable Software and Affected Versions: Robot affected versions not specified Description: The issue allows a local attacker to bypass authentication and perform a Man-in-the-Middle MITM attack on the robot's camera video stream. This could lead to the consumption of the robot's...

Unitree Robotics A1 Security Breach

Unitree Robotics A1 is a quadrupedal robot from Chinese company Unitree Robotics. A security vulnerability exists in Unitree Robotics A1 version 1.16, which stems from an authentication bypass vulnerability. This vulnerability can be exploited by a local attacker to conduct a man-in-the-middle MI...

PT-2023-23118 · Unitreerobotics +1 · A1 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to a lack of authentication, allowing an unauthenticated local user to access cameras through the web server without any form of authentication. Recommendations...

CVE-2023-6248 Data leakage and arbitrary remote code execution in Syrus cloud devices

The Syrus4 IoT gateway utilizes an unsecured MQTT server to download and execute arbitrary commands, allowing a remote unauthenticated attacker to execute code on any Syrus4 device connected to the cloud service. The MQTT server also leaks the location, video and diagnostic data from each connect...

CVE-2023-6248 Data leakage and arbitrary remote code execution in Syrus cloud devices

The Syrus4 IoT gateway utilizes an unsecured MQTT server to download and execute arbitrary commands, allowing a remote unauthenticated attacker to execute code on any Syrus4 device connected to the cloud service. The MQTT server also leaks the location, video and diagnostic data from each connect...

The vulnerability of the software for the effective use of the ELECOM Camera Assistant and the QuickFileDealer software, which improves file transfer speed, is related to the use of an unreliable search path, allowing attackers to escalate their privileges.

The vulnerability of the software for the effective use of the ELECOM Camera Assistant and the software for increasing file transfer speed, QuickFileDealer, is related to the use of an unreliable search path. Exploiting this vulnerability can allow a hacker to increase their privileges...