CVE-2023-30352

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for the RTSP feed...

CVE-2023-30356

Missing Support for an Integrity Check in Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows attackers to update the device with crafted firmware...

PT-2023-22649 · Tenda · Tenda Ip Camera Cp3

Name of the Vulnerable Software and Affected Versions: Shenzen Tenda Technology IP Camera CP3 version 11.10.00.2211041355 Description: The issue allows unauthenticated remote code execution via an XML document. Recommendations: For version 11.10.00.2211041355, at the moment, there is no informati...

CVE-2023-30351

CVE-2023-30351 affects Shenzen Tenda Technology IP Camera CP3, version 11.10.00.2211041355. The issue is a hard-coded default root password stored with weak encryption, enabling an attacker to authenticate via TELNET (or UART) using exposed credentials. The CVSS v3.1 base score is 7.5 (HIGH) with...

CVE-2023-30353

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows unauthenticated remote code execution via an XML document...

PT-2023-22647 · Shenzen Tenda Technology · Tenda Ip Camera Cp3

Name of the Vulnerable Software and Affected Versions: Shenzen Tenda Technology IP Camera CP3 version 11.10.00.2211041355 Description: The issue is related to a hard-coded default password for the root user, which is stored using weak encryption. This allows attackers to connect to the TELNET...

CVE-2023-30353

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows unauthenticated remote code execution via an XML document...

PT-2023-22650 · Shenzen Tenda Technology · Tenda Ip Camera Cp3

Name of the Vulnerable Software and Affected Versions: Shenzen Tenda Technology IP Camera CP3 version V11.10.00.2211041355 Description: The issue concerns physical access to U-Boot via the UART, where the Wi-Fi password is exposed, and a hardcoded boot password can be used for console access...

CVE-2023-30354

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 does not defend against physical access to U-Boot via the UART: the Wi-Fi password is shown, and the hardcoded boot password can be inserted for console access...

CVE-2023-30353

Affected product: Shenzen Tenda Technology IP Camera CP3, version V11.10.00.2211041355. Vulnerability: unauthenticated remote code execution via an XML document. CVSSv3.1: 9.8 (CRITICAL), AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. Root cause and precise exploit details are not provided in the documents...

CVE-2023-30352

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for the RTSP feed...

PT-2023-22651 · Shenzen Tenda Technology · Tenda Ip Camera Cp3

Name of the Vulnerable Software and Affected Versions: Shenzen Tenda Technology IP Camera CP3 version V11.10.00.2211041355 Description: The issue is related to missing support for an integrity check, allowing attackers to update the device with crafted firmware. This enables potential manipulatio...

CVE-2023-30354

The CVE-2023-30354 entry concerns Shenzen Tenda CP3 IP Camera (v11.10.00.2211041355). The issue arises from allowing physical access to U-Boot via UART, which exposes the Wi‑Fi password and enables a hardcoded boot password to be entered for console access. Affected component: U-Boot console on C...

CVE-2023-30352

CVE-2023-30352 affects Shenzen Tenda Technology IP Camera CP3 (firmware v11.10.00.2211041355). Root cause: hard-coded default password for the RTSP feed, enabling potential unauthorized access. Impact per CVSS: high confidentiality, integrity, and availability (score 9.8). Mitigations from connec...

CVE-2023-26032

ZoneMinder is affected by a SQL Injection in versions prior to 1.36.33 and 1.37.33 via a malicious JSON Web Token. The vulnerability arises because the Username field of the JWT token is trusted during SQL queries, enabling an attacker who can determine the JWT HASH key to forge a token and execu...

New Mirai Botnet Variant 'V3G4' Exploiting 13 Flaws to Target Linux and IoT Devices

A new variant of the notorious Mirai botnet has been found leveraging several security vulnerabilities to propagate itself to Linux and IoT devices. Observed during the second half of 2022, the new version has been dubbed V3G4 by Palo Alto Networks Unit 42, which identified three different...

Hikivision IP Camera Command Injection Vulnerability

The Hikivision Product is affected by a Command Injection Vulnerability in the web server component of its user interface. As such, a remote unauthenticated attacker can cause the product to run commands via the language tags. Note that Nessus has not tested for this issue but has instead relied...

PT-2022-5484 · Unknown · Vport P06-1Mp-M12 +1

Name of the Vulnerable Software and Affected Versions: VPort P16-1MP-M12, VPort P16-1MP-M12-IR, VPort P06-1MP-M12 affected versions not specified Description: The issue is related to the use of uncontrolled format strings in the RTSP service of the IP camera microprogram. Exploitation of this iss...

PT-2022-5483 · Unknown · Vport P06-1Mp-M12 +1

Name of the Vulnerable Software and Affected Versions: VPort P16-1MP-M12 affected versions not specified VPort P16-1MP-M12-IR affected versions not specified VPort P06-1MP-M12 affected versions not specified Description: The issue is related to a buffer copy without checking the size of the input...

PT-2022-5482 · Unknown · Vport P06-1Mp-M12 +1

Name of the Vulnerable Software and Affected Versions: VPort P16-1MP-M12 affected versions not specified VPort P16-1MP-M12-IR affected versions not specified VPort P06-1MP-M12 affected versions not specified Description: The issue is related to a null pointer dereference in the RTSP service of th...