CVE-2017-13719

The Amcrest IPM-721S AmcrestIPC-AWXXEngNV2.420.AC00.17.R.20170322 allows HTTP requests that permit enabling various functionalities of the camera by using HTTP APIs, instead of the web management interface that is provided by the application. This HTTP API receives the credentials as base64 encod...

CVE-2017-13719

CVE-2017-13719 affects the Amcrest IPM-721S camera. The HTTP API accepts credentials in the Authorization header, but a missing length check allows a 1024-character password to trigger a stack-based buffer overflow in the credential-checking code (binary “sonia” in /usr). This memory corruption c...

CVE-2017-8228

Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices mishandle reboots within the past two hours. Amcrest cloud services does not perform a thorough verification when allowing the user to add a new camera to the user's account to ensure that the user actually owns the camera other than knowing the...

CVE-2017-8226

Technical details about CVE-2017-8226 are not publicly provided in the supplied documents. The materials mention default credentials and vulnerable firmware but do not disclose affected components, versions, or remediation specifics. Monitor for updates.

VulnCheck KEV: CVE-2017-18377

An issue was discovered on Wireless IP Camera P2P WIFICAM cameras. There is Command Injection in the setftp.cgi script via shell metacharacters in the pwd variable, as demonstrated by a setftp.cgi?svr=192.168.1.1&port=21&user=ftp URI...

CVE-2019-9676

Buffer overflow vulnerability found in some Dahua IP Camera devices IPC-HFW1XXX,IPC-HDW1XXX,IPC-HFW2XXX Build before 2018/11. The vulnerability exits in the function of redirection display for serial port printing information, which can not be used by product basic functions. After an attacker lo...

Buffer overflow

Buffer overflow vulnerability found in some Dahua IP Camera devices IPC-HFW1XXX,IPC-HDW1XXX,IPC-HFW2XXX Build before 2018/11. The vulnerability exits in the function of redirection display for serial port printing information, which can not be used by product basic functions. After an attacker lo...

CVE-2019-9676

Buffer overflow vulnerability found in some Dahua IP Camera devices IPC-HFW1XXX,IPC-HDW1XXX,IPC-HFW2XXX Build before 2018/11. The vulnerability exits in the function of redirection display for serial port printing information, which can not be used by product basic functions. After an attacker lo...

CVE-2017-18377

An issue was discovered on Wireless IP Camera P2P WIFICAM cameras. There is Command Injection in the setftp.cgi script via shell metacharacters in the pwd variable, as demonstrated by a setftp.cgi?svr=192.168.1.1&port=21&user=ftp URI...

Command injection

An issue was discovered on Wireless IP Camera P2P WIFICAM cameras. There is Command Injection in the setftp.cgi script via shell metacharacters in the pwd variable, as demonstrated by a setftp.cgi?svr=192.168.1.1&port=21&user=ftp URI...

CVE-2017-18377

CVE-2017-18377 affects Wireless IP Camera (P2P) WIFICAM cameras. The issue is a command injection in the set_ftp.cgi script, exploitable via shell metacharacters in the pwd parameter (example: set_ftp.cgi?svr=192.168.1.1&port=21&user=ftp). Root cause: unsanitized input passed to a shell context w...

Q-See IP Camera Default Credentials (HTTP)

The remote installation of Q-See Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/...

Q-See IP Camera Detection (HTTP)

HTTP based detection of Q-See Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or...

TP-Link IP Cameras Default Credentials (HTTP)

The remote installation of TP-Link Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either...

DeviceViewer Buffer Overflow Vulnerability

DeviceViewer is a Windows-based IP camera viewing application. A buffer overflow vulnerability exists in DeviceViewer version 3.12.0.1, which can be exploited by an attacker to cause a buffer overflow or heap overflow...

CVE-2019-8387

MASTER IPCAMERA01 3.3.4.2103 devices allow Remote Command Execution, related to the thttpd component...

Foscam IP Camera Default Credentials (HTTP)

The remote installation of Foscam Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either versi...

Foscam IP Camera Remote Detection

Detects the installation of Foscam Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either...

exacqVision 9.8 Unquoted Service Path Privilege Escalation

exacqVision 9.8 Unquoted Service Path Privilege Escalation Vendor: Exacq Technologies, Inc. Product web page: https://www.exacq.com Affected version: 9.8.4.150001 Summary: The exacqVision VMS Video Management System software records surveillance video from thousands of IP camera models and displa...

Amcrest Technologies IP Camera Default Credentials (HTTP)

The remote installation of Amcrest Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it...