757 matches found
Pelco SarixSpectra Cameras - Cross-Site Request Forgery Cross-Site Scripting
Pelco SarixSpectra Cameras - Cross-Site Request Forgery Cross-Site Scripting Schneider Electric Pelco Sarix/Spectra Cameras Multiple XSS Vulnerabilities Vendor: Schneider Electric SE Product web page: https://www.pelco.com Affected version: Sarix Enhanced - Model: IME219 Firmware: 2.1.2.0.8280-A0...
Schneider Electric Pelco Sarix/Spectra Cameras CSRF Enable SSH Root Access
Summary Pelco offers the broadest selection of IP cameras designed for security surveillance in a wide variety of commercial and industrial settings. From our industry-leading fixed and high-speed IP cameras to panoramic, thermal imaging, explosionproof and more, we offer a camera for any...
Multiple IP-Cameras Directory Traversal Vulnerability
The IP-Camera is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Hard-coded Passwords Make Hacking Foscam ‘IP Cameras’ Much Easier
Security researchers have discovered over a dozen of vulnerabilities in tens of thousands of web-connected cameras that can not be protected just by changing their default credentials. Vulnerabilities found in two models of IP cameras from China-based manufacturer Foscam allow attackers to take...
Dahua Digital Video Recorder and IP Camera Configuration File Password Vulnerability
Dahua DH-IPC-HDBW23A0RN-ZS and others are camera products from DaHua China. A profile password vulnerability exists in a variety of DaHua digital video recorders and IP cameras, which can be exploited by an attacker to impersonate a privileged user and gain access to sensitive information...
Hikvision Patches Backdoor in IP Cameras
Hikvision, a Chinese manufacturer of video surveillance equipment, recently patched a backdoor in a slew of its cameras that could have made it possible for a remote attacker to gain full admin access to affected devices. The backdoor stems from two bugs: an improper authentication bug and a...
Dahua Technology Co., Ltd Digital Video Recorders and IP Cameras
CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available. Vendor: Dahua Technology Co., Ltd Equipment: Digital Video Recorders and IP Cameras Vulnerabilities: Use of Password Hash Instead of Password for Authentication, Password in Configuration File...
CVE-2017-5674
A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker to craft a malformed HTTP "GET system.ini HTTP/1.1\n\n" - note the lack of "/" in the path field of the request request that will disclose the configuration...
CVE-2017-5674
CVE-2017-5674 affects a GoAhead-based web server used in Foscam, VStarcam, and several white-label IP cameras. The vulnerability arises from crafting a malformed HTTP request (GET system.ini HTTP/1.1 with no leading slash) that discloses the device’s configuration file containing login credential...
Hundreds of Thousands Vulnerable IP Cameras Easy Target for Botnet, Researcher Says
A researcher claims that hundreds of thousands of shoddily made IP cameras suffer from vulnerabilities that could make them an easy target for attackers looking to spy, brute force them, or steal their credentials. Researcher Pierre Kim disclosed the vulnerabilities Wednesday and gave a...
Multiple IP-Cameras (P2P) WIFICAM Cameras Multiple Vulnerabilities
Multiple IP-Camera devices are prone to multiple vulnerabilities. This vulnerability was known to be exploited by the IoT Botnet SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Dahua Patching Backdoor in DVRs, IP Cameras
A California firm is rushing to patch a backdoor that apparently exists in a host of DVRs, CCTV and IP cameras it manufactures. Engineers with Dahua Technology USA began pushing firmware updates for the issue on Monday, something the company says stems from “a small piece of code.” The company sa...
PT-2017-54: Buffer Overflow in Dahua IP cameras
The specialists of the Positive Research center have detected a Buffer Overflow vulnerability in Dahua IP cameras. Vulnerability in the web interface of Sonia application /user/bin/sonia in Dahua IP camera products allows remote attackers to cause a denial of service out-of-bounds memory operatio...
Geutebrück IP Cameras
CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: Geutebrück Equipment: IP Cameras Vulnerabilities: Authentication Bypass and Improper Neutralization of Special Elements AFFECTED PRODUCTS The following Geutebrück G-Cam IP camera version is affected: G-Cam/EFD-2250...
On Backdoors in Sony's IP Cameras, a Linux Bug, and More
Mike Mimoso and Chris Brook discuss the news of the week, including the latest Linux bug, Sony closing backdoors in cameras, and Google’s new open source fuzzer. Show notes: Sony Closes Backdoors in IP-Enabled Cameras Old Linux Kernel Code Execution Bug Patched Google Debuts Continuous Fuzzer for...
Sony IPELA Engine IP Cameras Backdoor Vulnerability (Dec 2016)
Sony IPELA Engine IP Camera devices are prone to a backdoor vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Backdoor Vulnerability in Multiple Sony IPELA ENGINE IP Cameras
SNC-CH115, SNC-CH120 and SNC-CH160 are IP camera products from Sony. A backdoor vulnerability exists in multiple Sony IPELA ENGINE IP Cameras. A remote attacker can exploit the vulnerabilities to remotely manage the camera using Telnet/SSH services to gain root access to the Linux shell, affectin...
CVE-2016-9155
The following SIEMENS branded IP Camera Models CCMW3025, CVMW3025-IR, CFMW3025 prior to version 1.41SP18S1; CCPW3025, CCPW5025 prior to version 0.1.73S1; CCMD3025-DN18 prior to version v1.394S1; CCID1445-DN18, CCID1445-DN28, CCID1145-DN36, CFIS1425, CCIS1425, CFMS2025, CCMS2025, CVMS2025-IR,...
SIEMENS-branded IP-based CCTV cameras information disclosure vulnerability
CCMW3025, CVMW3025-IR, CFMW3025 and CCPW3025 are IP camera products from SIEMENS. An information disclosure vulnerability exists in SIEMENS-branded IP-based CCTV cameras. An attacker with web server network access could exploit the vulnerability to obtain server administrative credentials and...
