CVE-2017-7461

Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware LM.1.6.16.05 allows remote attackers to read arbitrary files via a request to a vendor-supplied CGI script that is used to read HTML text file, but that does not do any URI/path...

Directory traversal

Intellinet NFC-30ir IP Camera has a vendor backdoor that can allow a remote attacker access to a vendor-supplied CGI script in the web directory...

CVE-2017-7461

Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware LM.1.6.16.05 allows remote attackers to read arbitrary files via a request to a vendor-supplied CGI script that is used to read HTML text file, but that does not do any URI/path...

CVE-2017-7461

CVE-2017-7461 affects the Intellinet NFC-30ir IP Camera (firmware LM.1.6.16.05). A directory traversal flaw arises in a vendor-supplied CGI script used to read HTML text files, caused by a lack of URI/path sanitization. Attackers can remotely read arbitrary files via that CGI, exposing sensitive ...

CVE-2017-7462

Intellinet NFC-30ir IP Camera has a vendor backdoor that can allow a remote attacker access to a vendor-supplied CGI script in the web directory...

CVE-2017-7462

The CVE-2017-7462 entry corresponds to the Intellinet NFC-30ir IP Camera vulnerability where a vendor backdoor allows remote access to a vendor-supplied CGI script in the web directory. Connected sources (CNVD-2017-05506, NVD/CVE-2017-7462, and Exploit-DB entry 41829) corroborate a remote, unauth...

IDS VSE IP Camera - Authenticated Remote Code Execution Vulnerability

The ctrl.cgi script on the device's webserver that runs as root is vulnerable to remote command execution by an authenticated user, with the default password being "admin:admin". The sntpip GET parameter is fed to the command line by the CGI script without sanitization for semicolons, allowing an...

Multiple Vulnerabilities in Dahua IP Camera

Dahua IP Camera is a webcam from Dahua, China. An elevation of privilege and information disclosure vulnerability exists in Dahua IP Camera version 3.200.0001.6. An attacker can exploit this vulnerability by sending a specially crafted request to log into the IP Camera and gain full control of th...

Design/Logic Flaw

Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1. Use the default low-privilege credentials to list all users via a request to a certain URI. 2. Login to the IP camera with admin credentials so as to obtain full control of the target IP camera. During exploitation, the fir...

CVE-2017-7253

Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1. Use the default low-privilege credentials to list all users via a request to a certain URI. 2. Login to the IP camera with admin credentials so as to obtain full control of the target IP camera. During exploitation, the fir...

CVE-2017-7253

Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1. Use the default low-privilege credentials to list all users via a request to a certain URI. 2. Login to the IP camera with admin credentials so as to obtain full control of the target IP camera. During exploitation, the fir...

CVE-2017-7253

Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1. Use the default low-privilege credentials to list all users via a request to a certain URI. 2. Login to the IP camera with admin credentials so as to obtain full control of the target IP camera. During exploitation, the fir...

CVE-2017-7253

The CVE-2017-7253 entry concerns Dahua IP Camera devices (notably 3.200.0001.6). The vulnerability arises from credential misuse: an attacker can start with default low‑privilege credentials to enumerate users, then authenticate with admin credentials to obtain full control of the device. Exploit...

Wireless IP Camera (P2P) WIFICAMRSA Key and Certificate Disclosure Vulnerability

Wireless IP Camera P2P WIFICAM is a wireless IP camera. Wireless IP Camera P2P WIFICAM RSA key and certificate disclosure vulnerability. /system/www/pem/ck.pem contains an Apple certificate with a private RSA key, which can be exploited by an attacker to obtain sensitive information...

Cross site request forgery (csrf)

A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker to craft a malformed HTTP "GET system.ini HTTP/1.1\n\n" - note the lack of "/" in the path field of the request request that will disclose the configuration...

CVE-2017-5675

A command-injection vulnerability exists in a web application on a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models. The mail-sending form in the mail.htm page allows an attacker to inject a command into the receiver1 field in the form; it will b...

Command injection

A command-injection vulnerability exists in a web application on a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models. The mail-sending form in the mail.htm page allows an attacker to inject a command into the receiver1 field in the form; it will b...

CVE-2017-5675

A command-injection vulnerability exists in a web application on a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models. The mail-sending form in the mail.htm page allows an attacker to inject a command into the receiver1 field in the form; it will b...

CVE-2017-5674

A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker to craft a malformed HTTP "GET system.ini HTTP/1.1\n\n" - note the lack of "/" in the path field of the request request that will disclose the configuration...

CVE-2017-5675

The CVE-2017-5675 issue affects a custom GoAhead web server used in Foscam, Vstarcam, and multiple white-label IP cameras. The mail.htm page’s mail-sending form allows an attacker to inject a command into the receiver1 field, which is then executed with root privileges. The vulnerability is trigg...