CVE-2019-10711

Incorrect access control in the RTSP stream and web portal on all IP cameras based on Hisilicon Hi3510 firmware until Webware version V1.0.1 allows attackers to view an RTSP stream by connecting to the stream with hidden credentials guest or user that are neither displayed nor configurable in the...

CVE-2019-10710

Insecure permissions in the Web management portal on all IP cameras based on Hisilicon Hi3510 firmware allow authenticated attackers to receive a network's cleartext WiFi credentials via a specific HTTP request. This affects certain devices labeled as HI3510, HI3518, LOOSAFE, LEVCOECAM, Sywstoda,...

Design/Logic Flaw

Insecure permissions in the Web management portal on all IP cameras based on Hisilicon Hi3510 firmware allow authenticated attackers to receive a network's cleartext WiFi credentials via a specific HTTP request. This affects certain devices labeled as HI3510, HI3518, LOOSAFE, LEVCOECAM, Sywstoda,...

Improper access control

Incorrect access control in the RTSP stream and web portal on all IP cameras based on Hisilicon Hi3510 firmware until Webware version V1.0.1 allows attackers to view an RTSP stream by connecting to the stream with hidden credentials guest or user that are neither displayed nor configurable in the...

CVE-2019-10711

Incorrect access control in the RTSP stream and web portal on all IP cameras based on Hisilicon Hi3510 firmware until Webware version V1.0.1 allows attackers to view an RTSP stream by connecting to the stream with hidden credentials guest or user that are neither displayed nor configurable in the...

CVE-2019-10711

The CVE-2019-10711 entry describes an improper access control vulnerability in RTSP stream and web portal access for IP cameras based on Hisilicon Hi3510 firmware (up to Webware 1.0.1). Root cause: incorrect access control allowing access to an RTSP stream via hidden credentials (guest/user) not ...

CVE-2019-10710

CVE-2019-10710 describes insecure permissions in the Web management portal of IP cameras running Hisilicon Hi3510 firmware, allowing authenticated attackers to retrieve cleartext WiFi credentials via a specific HTTP request. Affected device families include HI3510/HI3518 and brands such as LOOSAF...

Beward IP Camera Detection (UPnP)

UPnP based detection of Beward IP cameras. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.114074...

Beward IP Cameras Arbitrary File Disclosure Vulnerability (Feb 2019) - Active Check

The remote installation of Beward SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.114073";...

Beward IP Camera Detection (HTTP)

HTTP based detection of Beward IP cameras. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribu...

UPDATE: Cameradar v3.0.1

PenTestIT RSS Feed My initial post covering this open source Real Time Streaming Protocol RTSP surveillance camera access multi-tool was about an older version. A lot has happened since then and an update – Cameradar v3.0.1 was recently made available by the author. In actuality, this post...

Input validation

An issue was discovered in several Bosch IP cameras for firmware versions 6.32 and higher. A malicious client could potentially succeed in the unauthorized execution of code on the device via the network interface...

CVE-2018-19036

Bosch IP Cameras (firmware 6.32 and higher) are affected by CVE-2018-19036 due to a buffer overflow in the web server. This could enable remote code execution by a malicious client over the network interface. The CNVD entry and NVD listing corroborate remote arbitrary code execution with high/sev...

Geutebrück GmbH E2 Series IP Cameras

1. EXECUTIVE SUMMARY CVSS v3 7.2 ATTENTION : Exploitable remotely/low skill level to exploit Vendor : Geutebrück GmbH Equipment : E2 Camera Series Vulnerability : OS Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability may allow a remote attacker to inject OS...

XMeye P2P Cloud Remote Code Execution / Integrity Issues Vulnerabilities

XMeye P2P Cloud used with Xiongmai IP Cameras, NVRs and DVRs suffer from predictable Cloud IDs, default admin password, and various other issues that can result in remote code execution. ======================================================================= title: Remote Code Execution via XMeye...

CVE-2018-13111

There exists a partial Denial of Service vulnerability in Wanscam HW0021 IP Cameras. An attacker could craft a malicious POST request to crash the ONVIF service on such a device...

Denial of service

There exists a partial Denial of Service vulnerability in Wanscam HW0021 IP Cameras. An attacker could craft a malicious POST request to crash the ONVIF service on such a device...

CVE-2018-13111

Affected products: Wanscam HW0021 IP Cameras. Vulnerability: Partial Denial of Service in the ONVIF service. Exploitation via crafting a malicious POST request can crash the ONVIF service on the device. No explicit root cause details provided beyond the DoS nature. Impact: Availability impact (se...

CVE-2018-13111

There exists a partial Denial of Service vulnerability in Wanscam HW0021 IP Cameras. An attacker could craft a malicious POST request to crash the ONVIF service on such a device...

Sanyo Network Camera Detection

Detection of Sanyo Network Camera. The script sends a connection request to the server and attempts to detect Sanyo Network Camera. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...