CVE-2017-18483

ANNKE SP1 HD wireless camera 3.4.1.1604071109 devices allow XSS via a crafted SSID...

CVE-2017-18483

ANNKE SP1 HD wireless camera 3.4.1.1604071109 devices allow XSS via a crafted SSID...

Design/Logic Flaw

ANNKE SP1 HD wireless camera 3.4.1.1604071109 devices allow XSS via a crafted SSID...

CVE-2017-18483

The CVE-2017-18483 entry relates to ANNKE SP1 HD wireless camera with firmware 3.4.1.1604071109, where an XSS vulnerability is triggered by a crafted SSID. Public references in connected records confirm the affected product and the injection vector via SSID, with NVD metrics indicating network at...

CVE-2017-18483

ANNKE SP1 HD wireless camera 3.4.1.1604071109 devices allow XSS via a crafted SSID...

MicroDigital N-series cameras Operating System Command Injection Vulnerability

MicroDigital N-series cameras is an N-series network camera from MicroDigital Korea. An operating system command injection vulnerability exists in MicroDigital N-series cameras. An attacker can exploit this vulnerability to execute illegal operating system commands...

Default credentials

A cleartext password storage issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. The file in question is /usr/local/ipsca/mipsca.db. If a camera is compromised, the attacker can gain access to passwords and abuse them to compromise further systems...

CVE-2019-14709

A cleartext password storage issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. The file in question is /usr/local/ipsca/mipsca.db. If a camera is compromised, the attacker can gain access to passwords and abuse them to compromise further systems...

CVE-2019-5995

Missing authorization vulnerability exists in EOS series digital cameras EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version 1.1.6 and earlier, EOS-1D C firmware version 1.4.1 and earlier, EOS 5D MARK III firmware version 1.3.5 and earlier, EOS 5D MARK IV firmware version...

CVE-2019-5998

Buffer overflow in PTP Picture Transfer Protocol of EOS series digital cameras EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version 1.1.6 and earlier, EOS-1D C firmware version 1.4.1 and earlier, EOS 5D MARK III firmware version 1.3.5 and earlier, EOS 5D MARK IV firmware...

CVE-2019-5995

CVE-2019-5995 affects Canon EOS-series cameras and other Canon models via missing authorization in firmware, enabling a silent malicious firmware update over USB or Wi‑Fi. Documented impact includes a silent malicious firmware update that can encrypt data and display ransom, with PoC demonstratio...

Amcrest IP2M-841B Authentication Bypass Vulnerability

The Amcrest IP2M-841B is an IP camera from Amcrest. An authentication bypass vulnerability exists in the Amcrest IP2M-841B using firmware version 2.520.AC00.18.R. The vulnerability occurs when the program does not require authentication when accessing an HTTP endpoint/video call. An attacker coul...

VulnCheck KEV: CVE-2021-41506

Xiaongmai AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, HI351850H10LS39 V4.02.R11.7601.Nat.Onvif.20170420, V4.02.R11.Nat.Onvif.20160422, V4.02.R11.7601.Nat.Onvif.20170424, V4.02.R11.Nat.Onvif.20170327, V4.02.R11.Nat.Onvif.20161205,...

Amcrest Technologies IP Camera Unauthenticated Remote Audio Streaming Vulnerability

The remote installation of Amcrest Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it...

Amcrest Cameras 2.520.AC00.18.R - Unauthenticated Audio Streaming

Amcrest Cameras 2.520.AC00.18.R - Unauthenticated Audio Streaming Exploit Title: Unauthenticated Audio Streaming from Amcrest Camera Shodan Dork: html:"@WebVersion@" Date: 08/29/2019 Exploit Author: Jacob Baines Vendor Homepage: https://amcrest.com/ Software Link:...

Amcrest Cameras 2.520.AC00.18.R - Unauthenticated Audio Streaming

Exploit Title: Unauthenticated Audio Streaming from Amcrest Camera Shodan Dork: html:"@WebVersion@" Date: 08/29/2019 Exploit Author: Jacob Baines Vendor Homepage: https://amcrest.com/ Software Link: https://amcrest.com/firmwaredownloads Affected Version: V2.520.AC00.18.R Fixed Version:...

Amcrest Cameras 2.520.AC00.18.R Unauthenticated Audio Streaming

Exploit Title: Unauthenticated Audio Streaming from Amcrest Camera Shodan Dork: html:"@WebVersion@" Date: 08/29/2019 Exploit Author: Jacob Baines Vendor Homepage: https://amcrest.com/ Software Link: https://amcrest.com/firmwaredownloads Affected Version: V2.520.AC00.18.R Fixed Version:...

Amcrest Cameras 2.520.AC00.18.R - Unauthenticated Audio Streaming Exploit

Exploit for hardware platform in category web applications Exploit Title: Unauthenticated Audio Streaming from Amcrest Camera Shodan Dork: html:"@email protected" Exploit Author: Jacob Baines Vendor Homepage: https://amcrest.com/ Software Link: https://amcrest.com/firmwaredownloads Affected...

CVE-2019-3948

The Amcrest IP2M-841B V2.520.AC00.18.R, Dahua IPC-XXBXX V2.622.0000000.9.R, Dahua IPC HX5X3X and HX4X3X V2.800.0000008.0.R, Dahua DH-IPC HX883X and DH-IPC-HX863X V2.622.0000000.7.R, Dahua DH-SD4XXXXX V2.623.0000000.7.R, Dahua DH-SD5XXXXX V2.623.0000000.1.R, Dahua DH-SD6XXXXX V2.640.0000000.2.R an...

CVE-2019-3948

CVE-2019-3948 impacts Amcrest IP2M-841B and several Dahua cameras/NVRs that expose HTTP endpoint /videotalk without authentication. An unauthenticated remote attacker can connect to this endpoint and potentially listen to device audio. Public documentation across multiple sources confirms the iss...