CVE-2017-8224

Wireless IP Camera P2P WIFICAM devices have a backdoor root account that can be accessed with TELNET...

CVE-2017-8225

On Wireless IP Camera P2P WIFICAM devices, access to .ini files containing credentials is not correctly checked. An attacker can bypass authentication by providing an empty loginuse parameter and an empty loginpas parameter in the URI...

CVE-2017-8221

Wireless IP Camera P2P WIFICAM devices rely on a cleartext UDP tunnel protocol aka the Cloud feature for communication between an Android application and a camera device, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2017-8221

CVE-2017-8221 affects Wireless IP Camera (P2P) WIFICAM devices using the GoAhead HTTP server. The issue combines a pre-auth info leak in the GoAhead web UI that exposes credentials (via system.ini and related files) when accessed with certain URIs, with an authenticated RCE path through the GoAhe...

CVE-2017-8225

CVE-2017-8225 is a pre-auth information disclosure in GoAhead-powered Wireless IP Camera (P2P) WIFICAM devices. The vulnerability lets an unauthenticated attacker bypass login by supplying empty loginuse/loginpas in the URI, enabling access to credentials stored in .ini/config files via the HTTP ...

CVE-2017-8222

Wireless IP Camera P2P WIFICAM devices have an "Apple Production IOS Push Services" private RSA key and certificate stored in /system/www/pem/ck.pem inside the firmware, which allows attackers to obtain sensitive information...

CVE-2017-8223

CVE-2017-8223 affects Wireless IP Camera (P2P) WIFICAM devices using the GoAhead HTTP server. The advisory details a pre-auth info-leak in the GoAhead web interface (credentials can be retrieved from system.ini via unauthenticated or weakly authenticated access) and an unauthenticated path to wat...

Buffalo WNC01WH Command Injection Vulnerability

Buffalo WNC01WH is a network camera from the Buffalo Group of Japan. A command injection vulnerability exists in the Buffalo WNC01WH. This allows a locally authenticated attacker to perform a command injection attack...

WNC01WH vulnerable to OS command injection

Overview WNC01WH provided by BUFFALO INC. is a network camera. WNC01WH contains an OS command injection vulnerability CWE-78. Kiyotaka ATSUMI of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact ...

Comelit Camera Detection

Binary data comelitcameradetect.nbin...

Axis Devices Detection (FTP)

FTP based detection of Axis devices. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it...

Code injection

Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B85, and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service OS crash by leveraging camera permissions and via crafted input to the camera driver...

CVE-2015-8223

Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B85, and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service OS crash by leveraging camera permissions and via crafted input to the camera driver...

CVE-2015-8223

The CVE-2015-8223 entry describes a local DoS vulnerability in Huawei camera drivers. Affected devices include Huawei P7 (before P7-L00C17B851, P7-L05C00B851, P7-L09C92B85) and Huawei P8 ALE-UL00 (before ALE-UL00B211). The issue is triggered by crafted input to the camera driver exploiting camera...

CVE-2015-8223

Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B85, and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service OS crash by leveraging camera permissions and via crafted input to the camera driver...

Intellinet NFC-30ir IP Camera Security Bypass Vulnerability

Intellinet NFC-30ir IP cameras are digital devices based on network transmission. A security bypass vulnerability in the Intellinet NFC-30ir IP Camera could allow a remote attacker to access vendor-supplied CGI scripts in a web directory...

Intellinet NFC-30ir IP Camera Directory Traversal Vulnerability

Intellinet NFC-30ir IP cameras are digital devices based on network transmission. A directory traversal vulnerability in the Intellinet NFC-30ir IP camera in LM.1.6.16.05 allows remote attackers to read arbitrary files via a request to a vendor-supplied CGI script used to read HTML text files...

CVE-2017-7461

Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware LM.1.6.16.05 allows remote attackers to read arbitrary files via a request to a vendor-supplied CGI script that is used to read HTML text file, but that does not do any URI/path...

Directory traversal

Intellinet NFC-30ir IP Camera has a vendor backdoor that can allow a remote attacker access to a vendor-supplied CGI script in the web directory...

CVE-2017-7461

Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware LM.1.6.16.05 allows remote attackers to read arbitrary files via a request to a vendor-supplied CGI script that is used to read HTML text file, but that does not do any URI/path...