Power LED Side-Channel Attack

This is a clever new side-channel attack: The first attack uses an Internet-connected surveillance camera to take a high-speed video of the power LED on a smart card reader­--or of an attached peripheral device--­during cryptographic operations. This technique allowed the researchers to pull a...

CVE-2023-32229

Due to an error in the software interface to the secure element chip on Bosch IP cameras of family CPP13 and CPP14, the chip can be permanently damaged when enabling the Stream security option signing of the video stream with option MD5, SHA-1 or SHA-256...

CVE-2023-32220

Milesight NCR/camera version 71.8.0.6-r5 allows authentication bypass through an unspecified method...

CVE-2023-32220

Milesight NCR/camera version 71.8.0.6-r5 allows authentication bypass through an unspecified method...

Authentication flaw

Milesight NCR/camera version 71.8.0.6-r5 allows authentication bypass through an unspecified method...

Airspace CCTV Camera 安全漏洞

Airspace CCTV Camera is a webcam from Airspace. A security vulnerability exists in Airspace CCTV Camera. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the vendor announcement...

PT-2023-23667 · Milesight · Milesight Ncr/Camera

Name of the Vulnerable Software and Affected Versions: Milesight NCR/camera version 71.8.0.6-r5 Description: The issue allows authentication bypass through an unspecified method. Recommendations: For Milesight NCR/camera version 71.8.0.6-r5, at the moment, there is no information about a newer...

CVE-2023-32220

CVE-2023-32220 : Based on the provided documents, Milesight NCR/camera version 71.8.0.6-r5 is affected by an authentication bypass via an unspecified method. The NVD entry lists a base score of 9.8 (CRITICAL) under CVSS 3.1, with attack vector NETWORK, no privileges required, and user interaction...

CVE-2023-32220 Milesight NCR/Camera Authentication Bypass

Milesight NCR/camera version 71.8.0.6-r5 allows authentication bypass through an unspecified method...

TP-LINK EC-70 缓冲区错误漏洞

The TP-LINK EC-70 is a camera from China P&L TP-LINK. A security vulnerability exists in TP-LINK EC-70 version 2.3.4 and earlier, which stems from the presence of a buffer overflow vulnerability...

Milesight 授权问题漏洞

Milesight is a complete artificial intelligence video surveillance solution from China-based Milesight. A security vulnerability exists in Milesight NCR/camera version 71.8.0.6-r5, which stems from a vulnerability that allows authentication to be bypassed via an unspecified method...

CVE-2023-0954

A debug feature in Sensormatic Electronics Illustra Pro Gen 4 Dome and PTZ cameras allows a user to compromise credentials after a long period of sustained attack...

CVE-2023-32220

Milesight NCR/camera version 71.8.0.6-r5 allows authentication bypass through an unspecified method...

BES--6024PB-I50H1 VideoPlayTool 安全漏洞

BESDER IP Camera VideoPlayTool is a BESDER IP Camera VideoPlayTool from BESDER China. A security vulnerability exists in BES--6024PB-I50H1 VideoPlayTool version v2.0.1.0, which originates from incorrect access control in the administration function. An attacker could exploit the vulnerability to...

CVE-2023-27126

The AES Key-IV pair used by the TP-Link TAPO C200 camera V3 EU on firmware version 1.1.22 Build 220725 is reused across all cameras. An attacker with physical access to a camera is able to extract and decrypt sensitive data containing the Wifi password and the TP-LINK account credential of the...

CVE-2023-27126

The AES Key-IV pair used by the TP-Link TAPO C200 camera V3 EU on firmware version 1.1.22 Build 220725 is reused across all cameras. An attacker with physical access to a camera is able to extract and decrypt sensitive data containing the Wifi password and the TP-LINK account credential of the...

CVE-2023-27126

The AES Key-IV pair used by the TP-Link TAPO C200 camera V3 EU on firmware version 1.1.22 Build 220725 is reused across all cameras. An attacker with physical access to a camera is able to extract and decrypt sensitive data containing the Wifi password and the TP-LINK account credential of the...

CVE-2023-27126

The AES Key-IV pair used by the TP-Link TAPO C200 camera V3 EU on firmware version 1.1.22 Build 220725 is reused across all cameras. An attacker with physical access to a camera is able to extract and decrypt sensitive data containing the Wifi password and the TP-LINK account credential of the...

CVE-2023-27126

CVE-2023-27126 affects the TP-Link TAPO C200 camera V3 (EU) with firmware 1.1.22 Build 220725. The AES Key–IV pair is reused across all cameras, so a physical attacker can extract and decrypt sensitive data (WiFi password and TP-LINK account credential). Public details about a patch or fix are no...

A week in security (May 29 - June 4)

Last week on Malwarebytes Labs: Barracuda Networks patches zero-day vulnerability in Email Security Gateway CISA issues warning to US businesses: Beware of China's state-sponsored cyber actor Microsoft gives Apple a migraine Financial services company OneMain fined $4.25 million for security laps...