CVE-2020-6852

CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 has weak authentication of TELNET access, leading to root privileges without any password required...

Authentication flaw

CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 has weak authentication of TELNET access, leading to root privileges without any password required...

Design/Logic Flaw

The CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 allows access to the RTSP service without a password...

CVE-2020-9349

The CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 allows access to the RTSP service without a password...

CVE-2020-6852

CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 has weak authentication of TELNET access, leading to root privileges without any password required...

CVE-2020-9349

The CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 allows access to the RTSP service without a password...

CVE-2020-9349

The CVE-2020-9349 entry concerns the CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919, where the RTSP service can be accessed without a password. This is documented across multiple sources in the connected data set (NVD, Red Hat, CNVD, etc.). The provided documents d...

CVE-2020-6852

CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 has weak authentication of TELNET access, leading to root privileges without any password required...

CVE-2020-6852

CVE-2020-6852 affects CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware version 3.4.2.0919, where TELNET access uses weak authentication, allowing root privileges without a password. This vulnerability is documented across multiple sources (NVD, Red Hat, CNVD, CVE lists) with th...

Unspecified Vulnerability in Zoom Client for Meetings

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. An unspecified vulnerability exists in Zoom Client for Meetings. An attacker can exploit the vulnerability to access the microphone and camera with the help of a specially crafted library...

CVE-2020-9349: Missing Authentication for Critical Function

The CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 allows access to the RTSP service without a password...

PT-2020-19265

Name of the Vulnerable Software and Affected Versions CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP version 3.4.2.0919 Description The issue is related to weak authentication of TELNET access, allowing root privileges without any password required. Recommendations For version 3.4.2.0919,...

PT-2020-20603

Name of the Vulnerable Software and Affected Versions CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP version 3.4.2.0919 Description The issue allows unauthorized access to the RTSP service without requiring a password. Recommendations For version 3.4.2.0919, consider disabling the RTSP...

CVE-2020-6852: Improper Restriction of Excessive Authentication Attempts

CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 has weak authentication of TELNET access, leading to root privileges without any password required...

CVE-2020-11470

Zoom Client for Meetings through 4.6.8 on macOS has the disable-library-validation entitlement, which allows a local process with the user's privileges to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Zoom Client's microphone and camera access...

CVE-2020-11470

Zoom Client for Meetings through 4.6.8 on macOS has the disable-library-validation entitlement, which allows a local process with the user's privileges to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Zoom Client's microphone and camera access...

Design/Logic Flaw

Zoom Client for Meetings through 4.6.8 on macOS has the disable-library-validation entitlement, which allows a local process with the user's privileges to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Zoom Client's microphone and camera access...

CVE-2020-11470

Zoom Client for Meetings through 4.6.8 on macOS has the disable-library-validation entitlement, which allows a local process with the user's privileges to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Zoom Client's microphone and camera access...

CVE-2020-11470

CVE-2020-11470 affects Zoom Client for Meetings on macOS (versions up to 4.6.8). The root cause is the disable-library-validation entitlement, which enables a local process with user privileges to load a crafted library and thereby gain unprompted microphone and camera access. This could allow an...

Two Zoom Zero-Day Flaws Uncovered

UPDATE Two zero-day flaws have been uncovered in Zoom’s macOS client version, according to researchers. The web conferencing platform vulnerabilities could give local, unprivileged attackers root privileges, and allow them to access victims’ microphone and camera. As of Thursday, the two...