Command injection

A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the system.ntp parameter to the farseer.out binary file, which cold let a malicious user execute arbitrary code...

Directory traversal

A Directory Traversal vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via a specially crafted GET request, which could let a malicious user obtain user credentials...

CVE-2013-1598

A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the system.ntp parameter to the farseer.out binary file, which cold let a malicious user execute arbitrary code...

CVE-2013-1598

Vivotek PT7135 IP cameras with firmware 0300a and 0400a are affected by CVE-2013-1598, an OS command injection in the binary farseer.out via the system.ntp parameter that lets an attacker execute arbitrary commands. The vulnerability spans pre-auth (0300a) and post-auth (0400a) access in the admi...

CVE-2013-1597

CVE-2013-1597 is a path-traversal vulnerability in Vivotek PT7135 IP Cameras (firmware 0300a and 0400a) allowing an attacker to dump memory and extract user credentials. The CoreLabs advisory and related references describe exploit chains that can retrieve credentials from /../../../../../../../....

CVE-2012-6451

Lorex LNC116 and LNC104 IP Cameras have a Remote Authentication Bypass Vulnerability...

Authentication flaw

Lorex LNC116 and LNC104 IP Cameras have a Remote Authentication Bypass Vulnerability...

CVE-2012-6451

Affected products: Lorex LNC116 and LNC104 IP Cameras. Vulnerability: Remote authentication bypass due to the web interface using HTTP Basic authentication but validating credentials only on the home page; direct URL navigation bypasses login. Impact: unauthorized viewing of live video feed and p...

CVE-2012-6451

Lorex LNC116 and LNC104 IP Cameras have a Remote Authentication Bypass Vulnerability...

CVE-2019-10957

Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx: All versions 1.12.0.25 and prior may allow a remote authenticated attacker with access to event configuration to store malicious code on the server, which could later be triggered by a legitimate user resulting in...

CVE-2019-10956

Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx: All versions 1.12.0.25 and prior may allow a remote authenticated user, using a specially crafted URL command, to execute commands as root...

CVE-2019-10958

Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx: All versions 1.12.0.25 and prior may allow a remote authenticated attacker with access to network configuration to supply system commands to the server, leading to remote code execution as root...

Remote code execution

Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx: All versions 1.12.0.25 and prior may allow a remote authenticated attacker with access to event configuration to store malicious code on the server, which could later be triggered by a legitimate user resulting in...

Remote code execution

Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx: All versions 1.12.0.25 and prior may allow a remote authenticated attacker with access to network configuration to supply system commands to the server, leading to remote code execution as root...

Design/Logic Flaw

Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx: All versions 1.12.0.25 and prior may allow a remote authenticated user, using a specially crafted URL command, to execute commands as root...

CVE-2019-10958

Geutebruck IP Cameras G-Code (EEC-2xxx) and G-Cam (EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx) are affected by CVE-2019-10958. All versions up to 1.12.0.25 may allow a remote authenticated attacker with network configuration access to supply system commands to the server, leading to remote code execut...

CVE-2019-10958

Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx: All versions 1.12.0.25 and prior may allow a remote authenticated attacker with access to network configuration to supply system commands to the server, leading to remote code execution as root...

CVE-2019-10957

CVE-2019-10957 affects Geutebrück G-Code (EEC-2xxx) and G-Cam (EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx) where all versions up to 1.12.0.25 are vulnerable. The issue is an improper neutralization of input during web page generation (cross-site scripting) that allows a remote authenticated attacker w...

CVE-2019-10957

Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx: All versions 1.12.0.25 and prior may allow a remote authenticated attacker with access to event configuration to store malicious code on the server, which could later be triggered by a legitimate user resulting in...

CVE-2019-10956

Geutebruck IP Cameras G-Code (EEC-2xxx) and G-Cam (EBC-21xx, EFD-22xx, ETHC-22xx, EWPC-22xx) with firmware up to 1.12.0.25 are affected by CVE-2019-10956 via OS command injection. A remote authenticated user can send a specially crafted URL command to the device and execute commands with root pri...