CVE-2019-7315

CVE-2019-7315 affects Genie Access WIP3BVAF WISH IP 3MP IR Auto Focus Bullet Camera devices running 3.x. The connected Nuclei template documents a Local File Inclusion (LFI) vulnerability exposed via the web interface, enabling an attacker to read sensitive files (demonstrated with /etc/shadow). ...