CVE-2017-8222

Wireless IP Camera P2P WIFICAM devices have an "Apple Production IOS Push Services" private RSA key and certificate stored in /system/www/pem/ck.pem inside the firmware, which allows attackers to obtain sensitive information...

CVE-2017-8223

Wireless IP Camera (P2P) WIFICAM devices are vulnerable to an improper authentication flaw in the RTSP server on port 10554/tcp . An attacker can exploit this by accessing tcp/av0_1 or tcp/av0_0 to watch the camera's live streaming without any authentication. While the RTSP flaw is the primary fo...

CVE-2017-8223: Improper Authentication

On Wireless IP Camera P2P WIFICAM devices, an attacker can use the RTSP server on port 10554/tcp to watch the streaming without authentication via tcp/av01 or tcp/av00...

CVE-2017-8222: Insufficiently Protected Credentials

Wireless IP Camera P2P WIFICAM devices have an "Apple Production IOS Push Services" private RSA key and certificate stored in /system/www/pem/ck.pem inside the firmware, which allows attackers to obtain sensitive information...

CVE-2017-8224: Use of Hard-coded Credentials

Wireless IP Camera P2P WIFICAM devices have a backdoor root account that can be accessed with TELNET...

CVE-2017-8221: Missing Encryption of Sensitive Data

Wireless IP Camera P2P WIFICAM devices rely on a cleartext UDP tunnel protocol aka the Cloud feature for communication between an Android application and a camera device, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2017-8225: Insufficiently Protected Credentials

On Wireless IP Camera P2P WIFICAM devices, access to .ini files containing credentials is not correctly checked. An attacker can bypass authentication by providing an empty loginuse parameter and an empty loginpas parameter in the URI...

Intellinet NFC-30ir IP Camera Directory Traversal Vulnerability

Intellinet NFC-30ir IP cameras are digital devices based on network transmission. A directory traversal vulnerability in the Intellinet NFC-30ir IP camera in LM.1.6.16.05 allows remote attackers to read arbitrary files via a request to a vendor-supplied CGI script used to read HTML text files...

CVE-2017-7461

Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware LM.1.6.16.05 allows remote attackers to read arbitrary files via a request to a vendor-supplied CGI script that is used to read HTML text file, but that does not do any URI/path...

Directory traversal

Intellinet NFC-30ir IP Camera has a vendor backdoor that can allow a remote attacker access to a vendor-supplied CGI script in the web directory...

CVE-2017-7461

Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware LM.1.6.16.05 allows remote attackers to read arbitrary files via a request to a vendor-supplied CGI script that is used to read HTML text file, but that does not do any URI/path...

Directory traversal

Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware LM.1.6.16.05 allows remote attackers to read arbitrary files via a request to a vendor-supplied CGI script that is used to read HTML text file, but that does not do any URI/path...

CVE-2017-7462

The CVE-2017-7462 entry corresponds to the Intellinet NFC-30ir IP Camera vulnerability where a vendor backdoor allows remote access to a vendor-supplied CGI script in the web directory. Connected sources (CNVD-2017-05506, NVD/CVE-2017-7462, and Exploit-DB entry 41829) corroborate a remote, unauth...

CVE-2017-7462

Intellinet NFC-30ir IP Camera has a vendor backdoor that can allow a remote attacker access to a vendor-supplied CGI script in the web directory...

CVE-2017-7461

CVE-2017-7461 affects the Intellinet NFC-30ir IP Camera (firmware LM.1.6.16.05). A directory traversal flaw arises in a vendor-supplied CGI script used to read HTML text files, caused by a lack of URI/path sanitization. Attackers can remotely read arbitrary files via that CGI, exposing sensitive ...

CVE-2017-7461

Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware LM.1.6.16.05 allows remote attackers to read arbitrary files via a request to a vendor-supplied CGI script that is used to read HTML text file, but that does not do any URI/path...

CVE-2017-7461: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware LM.1.6.16.05 allows remote attackers to read arbitrary files via a request to a vendor-supplied CGI script that is used to read HTML text file, but that does not do any URI/path...

CVE-2017-7462: Improper Limitation of a Pathname to a Restricted Directory

Intellinet NFC-30ir IP Camera has a vendor backdoor that can allow a remote attacker access to a vendor-supplied CGI script in the web directory...

IDS VSE IP Camera - Authenticated Remote Code Execution Vulnerability

The ctrl.cgi script on the device's webserver that runs as root is vulnerable to remote command execution by an authenticated user, with the default password being "admin:admin". The sntpip GET parameter is fed to the command line by the CGI script without sanitization for semicolons, allowing an...

Multiple Vulnerabilities in Dahua IP Camera

Dahua IP Camera is a webcam from Dahua, China. An elevation of privilege and information disclosure vulnerability exists in Dahua IP Camera version 3.200.0001.6. An attacker can exploit this vulnerability by sending a specially crafted request to log into the IP Camera and gain full control of th...