CVE-2022-38970

ieGeek IG20 hipcam RealServer V1.0 is vulnerable to Incorrect Access Control. The algorithm used to generate device IDs UIDs for devices that utilize Shenzhen Yunni Technology iLnkP2P suffers from a predictability flaw that allows remote attackers to establish direct connections to arbitrary...

CVE-2022-38970

Summary (CVE-2022-38970) : The ieGeek IG20 hipcam RealServer V1.0 is reported vulnerable due to a predictability flaw in the UID generation algorithm used by Shenzhen Yunni Technology iLnkP2P, leading to Incorrect Access Control and the ability for remote attackers to establish direct connections...

PT-2022-24628 · Iegeek · Iegeek Ig20 Hipcam Realserver

Name of the Vulnerable Software and Affected Versions: ieGeek IG20 hipcam RealServer version V1.0 Description: The algorithm used to generate device IDs UIDs for devices that utilize Shenzhen Yunni Technology iLnkP2P suffers from a predictability flaw, allowing remote attackers to establish direc...

CVE-2022-38970: Use of Insufficiently Random Values

ieGeek IG20 hipcam RealServer V1.0 is vulnerable to Incorrect Access Control. The algorithm used to generate device IDs UIDs for devices that utilize Shenzhen Yunni Technology iLnkP2P suffers from a predictability flaw that allows remote attackers to establish direct connections to arbitrary...