Code injection

Xiongmai Camera XM-JPR2-LX V4.02.R12.A6420987.10002.147502.00000 is vulnerable to account takeover...

Design/Logic Flaw

Xiongmai Camera XM-JPR2-LX V4.02.R12.A6420987.10002.147502.00000 is vulnerable to plain-text traffic sniffing...

PT-2022-10781

Name of the Vulnerable Software and Affected Versions Xiongmai Camera XM-JPR2-LX version V4.02.R12.A6420987.10002.147502.00000 Description The issue allows for account takeover. Recommendations For Xiongmai Camera XM-JPR2-LX version V4.02.R12.A6420987.10002.147502.00000, at the moment, there is n...

CVE-2021-38827

Xiongmai Camera XM-JPR2-LX V4.02.R12.A6420987.10002.147502.00000 is vulnerable to account takeover...

CVE-2021-38827

Xiongmai Camera XM-JPR2-LX V4.02.R12.A6420987.10002.147502.00000 is vulnerable to account takeover...

CVE-2021-38828: Cleartext Transmission of Sensitive Information

Xiongmai Camera XM-JPR2-LX V4.02.R12.A6420987.10002.147502.00000 is vulnerable to plain-text traffic sniffing...

CVE-2021-38827: Authentication Bypass by Capture-replay

Xiongmai Camera XM-JPR2-LX V4.02.R12.A6420987.10002.147502.00000 is vulnerable to account takeover...

CVE-2021-38828

CVE-2021-38828 affects Xiongmai Camera XM-JPR2-LX, version V4.02.R12.A6420987.10002.147502.00000. The documented vulnerability is exposure of sensitive data via plain-text traffic sniffing, with a high confidentiality impact and no integrity/availability impact reported. The root cause is not exp...

CVE-2021-38827

CVE-2021-38827 affects the Xiongmai Camera XM-JPR2-LX, version V4.02.R12.A6420987.10002.147502.00000. The connected data confirms the root cause as a vulnerability enabling account takeover (attack surface indicated by adjacent access, no user interaction required, with confidentiality, integrity...

CVE-2021-38828

Xiongmai Camera XM-JPR2-LX V4.02.R12.A6420987.10002.147502.00000 is vulnerable to plain-text traffic sniffing...

PT-2022-10782

Name of the Vulnerable Software and Affected Versions Xiongmai Camera XM-JPR2-LX version V4.02.R12.A6420987.10002.147502.00000 Description The issue allows for plain-text traffic sniffing. Recommendations For Xiongmai Camera XM-JPR2-LX version V4.02.R12.A6420987.10002.147502.00000, at the moment,...

CVE-2021-38828

Xiongmai Camera XM-JPR2-LX V4.02.R12.A6420987.10002.147502.00000 is vulnerable to plain-text traffic sniffing...

Xiongmai Camera XM-JPR2-LX has security vulnerabilities

Xiongmai Camera XM-JPR2-LX is a video surveillance device from China Xiongmai Technology Xiongmai Company. A security vulnerability exists in the Xiongmai Camera XM-JPR2-LX version V4.02.R12.A6420987.10002.147502.00000, which originates from the vulnerability of the device to account theft...

Xiongmai Camera XM-JPR2-LX has security vulnerabilities

Xiongmai Camera XM-JPR2-LX is a video surveillance device from China Xiongmai Technology Xiongmai Company. A security vulnerability exists in the Xiongmai Camera XM-JPR2-LX version V4.02.R12.A6420987.10002.147502.00000, which originates from the vulnerability of the device to account theft...

PT-2022-5484 · Unknown · Vport P06-1Mp-M12 +1

Name of the Vulnerable Software and Affected Versions: VPort P16-1MP-M12, VPort P16-1MP-M12-IR, VPort P06-1MP-M12 affected versions not specified Description: The issue is related to the use of uncontrolled format strings in the RTSP service of the IP camera microprogram. Exploitation of this iss...

PT-2022-5483 · Unknown · Vport P06-1Mp-M12 +1

Name of the Vulnerable Software and Affected Versions: VPort P16-1MP-M12 affected versions not specified VPort P16-1MP-M12-IR affected versions not specified VPort P06-1MP-M12 affected versions not specified Description: The issue is related to a buffer copy without checking the size of the input...

PT-2022-5482 · Unknown · Vport P06-1Mp-M12 +1

Name of the Vulnerable Software and Affected Versions: VPort P16-1MP-M12 affected versions not specified VPort P16-1MP-M12-IR affected versions not specified VPort P06-1MP-M12 affected versions not specified Description: The issue is related to a null pointer dereference in the RTSP service of th...

CVE-2020-12509

In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the camera-file module...

CVE-2020-12509

In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the camera-file module...

Path traversal

In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the camera-file module...