CVE-2019-12920

On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the network can login remotely to the camera and gain root access. The device ships with a hardcoded 12345678 password for the root account, accessible from a TELNET login prompt...

CVE-2019-12919

On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the local network has unauthenticated access to the internal SD card via the HTTP service on port 8000. The HTTP web server on the camera allows anyone to view or download the video archive recorded and saved o...

Shenzhen Cylan Technology Clever Dog Smart Camera DOG-2W and Shenzhen Cylan Technology Clever Dog Smart Camera DOG-2W-V4 File Disclosure Vulnerability

Shenzhen Cylan Technology Clever Dog Smart Camera DOG-2W and Shenzhen Cylan Technology Clever Dog Smart Camera DOG-2W-V4 are both a smart camera from China's Cylan Technology Shenzhen Cylan. Technology are both smart cameras from Shenzhen Cylan Technology. A security vulnerability exists in...

CVE-2019-12919

On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the local network has unauthenticated access to the internal SD card via the HTTP service on port 8000. The HTTP web server on the camera allows anyone to view or download the video archive recorded and saved o...

Hardcoded credentials

On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the network can login remotely to the camera and gain root access. The device ships with a hardcoded 12345678 password for the root account, accessible from a TELNET login prompt...

Code injection

On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the local network has unauthenticated access to the internal SD card via the HTTP service on port 8000. The HTTP web server on the camera allows anyone to view or download the video archive recorded and saved o...

CVE-2019-12920

Summary: CVE-2019-12920 affects Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4. Vulnerability: devices ship with a hardcoded root password (12345678) accessible from a TELNET prompt, enabling a network attacker to login remotely and gain root access. Root cause: hardcoded credential ...

CVE-2019-12919

On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the local network has unauthenticated access to the internal SD card via the HTTP service on port 8000. The HTTP web server on the camera allows anyone to view or download the video archive recorded and saved o...

CVE-2019-12919

CVE-2019-12919 affects Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4. The connected Red Hat/CNVD/NVD records describe an unauthenticated attacker on the local network gaining access to the device’s internal SD card through the HTTP service on port 8000, enabling viewing or downloadi...

Shenzhen Cylan Technology Clever Dog Smart Camera DOG-2W and DOG-2W-V4 Trust Management Issue Vulnerability

Shenzhen Cylan Technology Clever Dog Smart Camera DOG-2W and Shenzhen Cylan Technology Clever Dog Smart Camera DOG-2W-V4 are both a smart camera from China's Cylan Technology Shenzhen Cylan. Technology are both smart cameras from Shenzhen Cylan Technology. A security vulnerability exists in the...

CleverDog Smart Camera DOG-2W DOG-2W-V4 - Multiple Vulnerabilities

CleverDog Smart Camera DOG-2W DOG-2W-V4 - Multiple Vulnerabilities 1. Advisory Information ======================================== Title: Clever Dog Smart Camera Vendor Homepage: http://www.cleverdog.com.cn/ Tested on Camera types : DOG-2W, DOG-2W-V4 Vulnerability: Hardware- Multiple...

CleverDog Smart Camera DOG-2W / DOG-2W-V4 - Multiple Vulnerabilities

Advisory Information ======================================== Title: Clever Dog Smart Camera Vendor Homepage: http://www.cleverdog.com.cn/ Tested on Camera types : DOG-2W, DOG-2W-V4 Vulnerability: Hardware- Multiple Vulnerabilities Date: 14/06/2019 Author: Alex Akinbi Twitter: @alexakinbi 1...