CVE-2021-31793

The connected Red Hat and NVD records confirm CVE-2021-31793 affects NightOwl WDB-20-V2 devices (model: WDB-20-V2_20190314). A web server on port 80 can be accessed by unauthenticated users, enabling retrieval of snapshots and video streams via the /snapshot URI. The issue is described as an unau...

Night Owl WDB-20-V2: Access Control Vulnerability

Night Owl WDB-20-V2 is a webcam from Night Owl UK. A security vulnerability exists in the NightOwl WDB-20-V2 WDB-20-V2 20190314 device that allows an unauthenticated user to obtain a snapshot from the doorbell camera via the snapshot URI...

Qualcomm Camera Driver Resource Management Vulnerability

Qualcomm Camera Driver is a camera driver from Qualcomm Incorporated USA. The Qualcomm Camera Driver suffers from a resource management error vulnerability that stems from the use of the thread manager being released after it is cleaned up while a worker thread is processing an object. The...

CVE-2020-24918

A buffer overflow in the RTSP service of the Ambarella Oryx RTSP Server 2020-01-07 allows an unauthenticated attacker to send a crafted RTSP request, with a long digest authentication header, to execute arbitrary code in parseauthenticationheader in libamprotocol-rtsp.so.1 in rtspsvc or cause a...

CVE-2020-24918

A buffer overflow in the RTSP service of the Ambarella Oryx RTSP Server 2020-01-07 allows an unauthenticated attacker to send a crafted RTSP request, with a long digest authentication header, to execute arbitrary code in parseauthenticationheader in libamprotocol-rtsp.so.1 in rtspsvc or cause a...

CVE-2020-24918

A buffer overflow in the RTSP service of the Ambarella Oryx RTSP Server 2020-01-07 allows an unauthenticated attacker to send a crafted RTSP request, with a long digest authentication header, to execute arbitrary code in parseauthenticationheader in libamprotocol-rtsp.so.1 in rtspsvc or cause a...

Unauthorized Access Vulnerability in AXIS 225FD Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in the AXIS 225FD Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in AXIS M1124 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in AXIS M1124 Network Camera, which can be exploited by attackers to obtain sensitive information...

Logic flaw vulnerability in IP Camera of Zhejiang Dahua Corporation Technology Co.

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A logic flaw vulnerability exists in the IP Camera of Zhejiang Dahua Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information...

CVE-2020-24918: Buffer Copy without Checking Size of Input

A buffer overflow in the RTSP service of the Ambarella Oryx RTSP Server 2020-01-07 allows an unauthenticated attacker to send a crafted RTSP request, with a long digest authentication header, to execute arbitrary code in parseauthenticationheader in libamprotocol-rtsp.so.1 in rtspsvc or cause a...

Unauthorized Access Vulnerability in AXIS M1125 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in the AXIS M1125 Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in AXIS 2420 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in the AXIS 2420 Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in AXIS 209MFD Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in AXIS 209MFD Network Camera, which can be exploited by attackers to obtain sensitive information...

CVE-2021-30166

The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after logging in with the privileged permission...

CVE-2021-30167

The manage users profile services of the network camera device allows an authenticated. Remote attackers can modify URL parameters and further amend user’s information and escalate privileges to control the devices...

CVE-2021-30167

The manage users profile services of the network camera device allows an authenticated. Remote attackers can modify URL parameters and further amend user’s information and escalate privileges to control the devices...

CVE-2021-30166

The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after logging in with the privileged permission...

Command injection

The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after logging in with the privileged permission...

Information disclosure

The manage users profile services of the network camera device allows an authenticated. Remote attackers can modify URL parameters and further amend user’s information and escalate privileges to control the devices...

CVE-2021-30169 MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Sensitive Data Exposure-2

The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant user’s credential...