CVE-2019-20467: Undefined Security Weakness

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. The device by default has a TELNET interface available which is not advertised or functionally used, but is nevertheless available. Two backdoor accounts root and default exist that can be used on this...

CVE-2019-20464

CVE-2019-20464 affects the Sannce Smart HD Wifi Security Camera EAN 2 950004 595317. The issue is that while the mobile-application streaming over UDP requires a password, other RTSP-based streaming services exposed by the device do not, allowing an unauthenticated attacker to access the video fe...

CVE-2019-20466: Use of Password Hash With Insufficient Computational Effort

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. A local attacker with the "default" account is capable of reading the /etc/passwd file, which contains a weakly hashed root password. By taking this hash and cracking it, the attacker can obtain root righ...

CVE-2019-20463: Undefined Security Weakness

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. A crash and reboot can be triggered by crafted IP traffic, as demonstrated by the Nikto vulnerability scanner. For example, sending the 111111 string to UDP port 20188 causes a reboot. To deny service for...

CVE-2019-20465: Undefined Security Weakness

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. It is possible using TELNET without a password to control the camera's pan/zoom/tilt functionality...

CVE-2019-20464: Improper Authentication

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. By default, a mobile application is used to stream over UDP. However, the device offers many more services that also enable streaming. Although the service used by the mobile application requires a...