CVE-2023-36669

Missing Authentication for a Critical Function within the Kratos NGC Indoor Unit IDU before 11.4 allows remote attackers to obtain arbitrary control of the IDU/ODU system. Any attacker with layer-3 network access to the IDU can impersonate the Touch Panel Unit TPU within the IDU by sending crafte...

PT-2020-12734

Name of the Vulnerable Software and Affected Versions AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 affected versions not specified AvertX Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438 affected versions not specified Description The issue concerns the lack of...

CVE-2020-11624: Weak Password Requirements

An issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438. They do not require users to change the default password for the admin account. They only show a pop-up window suggesting a change but...

CVE-2020-11623: Undefined Security Weakness

An issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438. An attacker with physical access to the UART interface could access additional diagnostic and configuration functionalities as well as t...

CVE-2020-11625: Observable Discrepancy

An issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438. Failed web UI login attempts elicit different responses depending on whether a user account exists. Because the responses indicate wheth...

PT-2020-12735 · Avertx · Avertx Auto Focus Night Vision Hd Indoor/Outdoor Ip Dome Camera Hd838 +1

Name of the Vulnerable Software and Affected Versions: AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 AvertX Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438 Description: The issue allows attackers to identify legitimate usernames through different responses to...

firmchannel-xss.txt

Title: FirmChannel Digital Signage 3.24 Cross-site scripting ------------------------------------------------------------- Vendor: FirmChannel Vendor URL: www.firmchannel.com Vendor Response: Vendor has been notified and has since addressed the issue in the latest software release. Description: A...