Unauthorized Access Vulnerability in AXIS 209MFD Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in AXIS 209MFD Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in AXIS M1125 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in the AXIS M1125 Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in AXIS 225FD Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in the AXIS 225FD Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in AXIS M1124 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in AXIS M1124 Network Camera, which can be exploited by attackers to obtain sensitive information...

CVE-2021-30166

The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after logging in with the privileged permission...

CVE-2021-30167

The manage users profile services of the network camera device allows an authenticated. Remote attackers can modify URL parameters and further amend user’s information and escalate privileges to control the devices...

CVE-2021-30166

The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after logging in with the privileged permission...

CVE-2021-30167

The manage users profile services of the network camera device allows an authenticated. Remote attackers can modify URL parameters and further amend user’s information and escalate privileges to control the devices...

Command injection

The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after logging in with the privileged permission...

Information disclosure

The manage users profile services of the network camera device allows an authenticated. Remote attackers can modify URL parameters and further amend user’s information and escalate privileges to control the devices...

CVE-2021-30169 MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Sensitive Data Exposure-2

The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant user’s credential...

CVE-2021-30167

The CVE-2021-30167 entry describes an authentication-based vulnerability in MERIT LILIN IP cameras where the manage users profile services allow an authenticated remote attacker to modify URL parameters and amend user information, enabling privilege escalation to control the device. Affected prod...

CVE-2021-30168 MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Sensitive Data Exposure-1

The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s credential and further control the devices...

CVE-2021-30167 MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Broken Authentication

The manage users profile services of the network camera device allows an authenticated. Remote attackers can modify URL parameters and further amend user’s information and escalate privileges to control the devices...

CVE-2021-30166

CVE-2021-30166 affects Meri t Lilin IP cameras (MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 series). The root cause is the NTP Server configuration function not being verified with special parameters, enabling a remote attacker with privileged access to perform a command injection and execute arbitrary ...

CVE-2021-30166 MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Command Injection

The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after logging in with the privileged permission...

Unauthorized Access Vulnerability in Network Camera WV-SPW631L

Panasonic China Co., Ltd. is a manufacturer primarily responsible for carrying out sales and after-sales service activities for home appliances, systems, environments, components and other goods. An unauthorized access vulnerability exists in Network Camera WV-SPW631L, which can be exploited by...

network camera device 访问控制错误漏洞

Edimax Technology wireless network camera is a network device from Edimax Technology, China. It provides a video recording function. A security vulnerability exists in the network camera device that allows user authentication. A remote attacker can exploit this vulnerability to modify URL...

PT-2021-18641 · Unknown · Network Camera Device

Name of the Vulnerable Software and Affected Versions: Network camera device affected versions not specified Description: The issue concerns the manage users profile services of the network camera device, which allows an authenticated remote attacker to modify URL parameters and amend a user's...

Vivotek VIVOTEK IP Camera 操作系统命令注入漏洞

Vivotek VIVOTEK IP Camera is an IP camera from Vivotek, Taiwan, China. The IP camera device suffers from an operating system command injection vulnerability, which originates from the NTP Server configuration not being verified with special parameters. This vulnerability can be exploited by a...