CVE-2020-3110 Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Remote Code Execution and Denial of Service Vulnerability

A vulnerability in the Cisco Discovery Protocol implementation for the Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP Camera. The vulnerability is due to missing checks when processing...

CVE-2020-3110

CVE-2020-3110 affects Cisco Video Surveillance 8000 Series IP Cameras via Cisco Discovery Protocol (CDP). The issue arises from missing checks when processing CDP messages, allowing an unauthenticated, adjacent attacker in the same Layer-2 broadcast domain to remotely execute code or cause the de...

Critical Cisco 'CDPwn' Protocol Flaws Explained: Podcast

Researchers on Wednesday disclosed five critical vulnerabilities in Cisco Discovery Protocol CDP, the Cisco Proprietary Layer 2 network protocol that is used to discover information about locally attached Cisco equipment. Researchers say that the vulnerabilities, which they collectively call CDPw...

Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Remote Code Execution and Denial of Service Vulnerability

A vulnerability in the Cisco Discovery Protocol implementation for the Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP Camera. The vulnerability is due to missing checks when processing...

CVE-2020-3110 (AKA: CDPwn)

A vulnerability in the Cisco Discovery Protocol implementation for the Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP Camera. The vulnerability is due to missing checks when processing...

Cisco Discovery Protocol (CDP) enabled devices are vulnerable to denial-of-service and remote code execution

Overview Cisco Discovery Protocol CDP is a proprietary layer-2 networking protocol that Cisco devices use to gather information about devices connected to the network. Armis Security found that CDP supported devices are vulnerable to heap overflow in Cisco IP Cameras CVE-2020-3110, stack overflow...

CVE-2013-2573

A Command Injection vulnerability exists in the ap parameter to the /cgi-bin/mft/wirelessmft.cgi file in TP-Link IP Cameras TL-SC 3130, TL-SC 3130G, 3171G. and 4171G 1.6.18P12s, which could let a malicious user execute arbitrary code...

CVE-2013-2572

A Security Bypass vulnerability exists in TP-LINK IP Cameras TL-SC 3130, TL-SC 3130G, 3171G, 4171G, and 3130 1.6.18P12 due to default hard-coded credentials for the administrative Web interface, which could let a malicious user obtain unauthorized access to CGI files...

Command injection

A Command Injection vulnerability exists in the ap parameter to the /cgi-bin/mft/wirelessmft.cgi file in TP-Link IP Cameras TL-SC 3130, TL-SC 3130G, 3171G. and 4171G 1.6.18P12s, which could let a malicious user execute arbitrary code...

Security feature bypass

A Security Bypass vulnerability exists in TP-LINK IP Cameras TL-SC 3130, TL-SC 3130G, 3171G, 4171G, and 3130 1.6.18P12 due to default hard-coded credentials for the administrative Web interface, which could let a malicious user obtain unauthorized access to CGI files...

CVE-2013-2573

A Command Injection vulnerability exists in the ap parameter to the /cgi-bin/mft/wirelessmft.cgi file in TP-Link IP Cameras TL-SC 3130, TL-SC 3130G, 3171G. and 4171G 1.6.18P12s, which could let a malicious user execute arbitrary code...

CVE-2013-2573

TP-Link IP cameras with firmware v1.6.18P12 and below (TL-SC 3130, TL-SC 3130G, TL-SC 3171G, TL-SC 4171G) are affected by CVE-2013-2573 due to an OS command injection in /cgi-bin/mft/wireless_mft.cgi (parameter ap) that can be exploited using hard-coded credentials in Boa Web Server. This allows ...

CVE-2013-2570

A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 in the General.Time.NTP.Server parameter to the subC8C8 function of the binary /opt/cgi/view/param, which could let a remove malicious user execute arbitrary code...

CVE-2013-2568

A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 via the ap parameter to /cgi-bin/mft/wirelessmft.cgi, which could let a remote malicious user execute arbitrary code...

CVE-2013-2569

A Security Bypass vulnerability exists in Zavio IP Cameras through 1.6.3 because the RTSP protocol authentication is disabled by default, which could let a malicious user obtain unauthorized access to the live video stream...

Command injection

A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 in the General.Time.NTP.Server parameter to the subC8C8 function of the binary /opt/cgi/view/param, which could let a remove malicious user execute arbitrary code...

Command injection

A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 via the ap parameter to /cgi-bin/mft/wirelessmft.cgi, which could let a remote malicious user execute arbitrary code...

Security feature bypass

A Security Bypass vulnerability exists in Zavio IP Cameras through 1.6.3 because the RTSP protocol authentication is disabled by default, which could let a malicious user obtain unauthorized access to the live video stream...

CVE-2013-2572

A Security Bypass vulnerability exists in TP-LINK IP Cameras TL-SC 3130, TL-SC 3130G, 3171G, 4171G, and 3130 1.6.18P12 due to default hard-coded credentials for the administrative Web interface, which could let a malicious user obtain unauthorized access to CGI files...

CVE-2013-2572

CVE-2013-2572 / CVE-2013-2573 affect TP-Link IP cameras based on firmware v1.6.18P12 and earlier (TL-SC 3130, TL-SC 3130G, TL-SC 3171G, TL-SC 4171G). Root cause: hard-coded credentials in the administrative web interface (Boa http server) enabling bypass of authentication and, for CVE-2013-2573, ...