Denial of service

Some Huawei smart phones with software EVA-L09C34B142; EVA-L09C40B196; EVA-L09C432B210; EVA-L09C440B138; EVA-L09C464B150; EVA-L09C530B127; EVA-L09C55B190; EVA-L09C576B150; EVA-L09C635B221; EVA-L09C636B193; EVA-L09C675B130; EVA-L09C688B143; EVA-L09C703B160; EVA-L09C706B145; EVA-L09GBRC555B171;...

CVE-2017-8164

Some Huawei smart phones with software EVA-L09C34B142; EVA-L09C40B196; EVA-L09C432B210; EVA-L09C440B138; EVA-L09C464B150; EVA-L09C530B127; EVA-L09C55B190; EVA-L09C576B150; EVA-L09C635B221; EVA-L09C636B193; EVA-L09C675B130; EVA-L09C688B143; EVA-L09C703B160; EVA-L09C706B145; EVA-L09GBRC555B171;...

CVE-2017-8164

Some Huawei smart phones with software EVA-L09C34B142; EVA-L09C40B196; EVA-L09C432B210; EVA-L09C440B138; EVA-L09C464B150; EVA-L09C530B127; EVA-L09C55B190; EVA-L09C576B150; EVA-L09C635B221; EVA-L09C636B193; EVA-L09C675B130; EVA-L09C688B143; EVA-L09C703B160; EVA-L09C706B145; EVA-L09GBRC555B171;...

CVE-2018-7698

The CVE-2018-7698 entry describes a vulnerability in D-Link mydlink+ 3.8.5 build 259 for DCS-933L (1.05.04) and DCS-934L (1.05.04). The root cause is that the mydlink+ app transmits the user credentials (username/password) unencrypted from the app to the camera, allowing an attacker to obtain cre...

Hikvision IP Camera Web Interface Detection

Binary data hikvisionwwwdetect.nbin...

Hikvision IP Camera Remote Authentication Bypass

The remote Hikvision IP camera is affected by an authentication bypass vulnerability. A remote, unauthenticated attacker can read configurations including account passwords, access the camera images, or modify the camera firmware. C Tenable Network Security, Inc. include'compat.inc'; if descripti...

CVE-2017-11633

An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover RTSP credentials by connecting to TCP port 9527 and reading the InsertConnect field...

Design/Logic Flaw

An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover RTSP credentials by connecting to TCP port 9527 and reading the InsertConnect field...

Session fixation

An issue was discovered on Wireless IP Camera 360 devices. A root account with a known SHA-512 password hash exists, which makes it easier for remote attackers to obtain administrative access via a TELNET session...

CVE-2017-11634

An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover a weakly encoded admin password by connecting to TCP port 9527 and reading the password field of the debugging information, e.g., nTBCS19C corresponds to a password of 123456...

CVE-2017-11635

An issue was discovered on Wireless IP Camera 360 devices. Attackers can read recordings by navigating to /mnt/idea0 or /mnt/idea1 on the SD memory card...

CVE-2017-11632

An issue was discovered on Wireless IP Camera 360 devices. A root account with a known SHA-512 password hash exists, which makes it easier for remote attackers to obtain administrative access via a TELNET session...

Memory corruption

An issue was discovered on Wireless IP Camera 360 devices. Attackers can read recordings by navigating to /mnt/idea0 or /mnt/idea1 on the SD memory card...

CVE-2017-11635

CVE-2017-11635 affects Wireless IP Camera 360 devices. The vulnerability enables an attacker to read stored recordings by accessing the SD card via the unsupported paths /mnt/idea0 or /mnt/idea1 . The root cause is disclosed as an information disclosure issue on these devices, leading to partial ...

CVE-2017-11633

An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover RTSP credentials by connecting to TCP port 9527 and reading the InsertConnect field...

CVE-2017-11632

CVE-2017-11632 affects Wireless IP Camera 360 devices. A root account exists with a known SHA-512 password hash, enabling remote attackers to obtain administrative access via TELNET. Multiple connected sources corroborate the root-privilege risk and remote TELNET vector, with high-severity impact...

CVE-2017-11634

The CVE-2017-11634 issue affects Wireless IP Camera 360 devices. Remote attackers can read a weakly encoded admin password by connecting to TCP port 9527 and inspecting the debugging information; for example, nTBCS19C corresponds to the password 123456. The vulnerability has a high/critical impac...

CVE-2017-11634

An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover a weakly encoded admin password by connecting to TCP port 9527 and reading the password field of the debugging information, e.g., nTBCS19C corresponds to a password of 123456...

CVE-2017-11632

An issue was discovered on Wireless IP Camera 360 devices. A root account with a known SHA-512 password hash exists, which makes it easier for remote attackers to obtain administrative access via a TELNET session...

CVE-2017-11633

The CVE-2017-11633 issue affects Wireless IP Camera 360 devices. Affected component: RTSP credential handling on the device. Root cause: remote attackers can read the InsertConnect field by connecting to TCP port 9527, leading to exposure of RTSP credentials. Publicly stated impact is credential ...