Hikvision hik-connect.com Authentication Vulnerability

Hikvision is a provider of video-centric IoT solutions. An authentication vulnerability exists in Hikvision hik-connect.com. An attacker can exploit the vulnerability to change a cookie value to another person's user ID will result in logging in as that user...

hik-connect.com / ezvizlife.com Authentication Bypass

There is a full write up of this bug here: https://medium.com/@evstykas/hackvision-8f50924e56d Vulnerability Security Advisory ======================================================================= title: No validation on cookie values product: hik-connect.com and ezvizlife.com vulnerable versio...