164 matches found
Authentication flaw
Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have a timeout policy to wait for 5 minutes in case 30 incorrect password attempts are detected using the Web and HTTP API interface provided by the device. However, if the same brute force attempt is performed using the ONVIF specification which...
Authorization
On Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices, the users on the device are divided into 2 groups "admin" and "user". However, as a part of security analysis it was identified that a low privileged user who belongs to the "user" group and who has access to login in to the web administrativ...
Authentication flaw
Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to download the administrative credentials. If the firmware version V2.420.AC00.16.R 9/9/2016 is dissected using binwalk tool, one obtains a user-x.squashfs.img.extracted archive which contains the filesystem set...
CVE-2017-8228
Amcrest IPM-721S (V2.420.AC00.16.R.20160909) contains a vulnerability (CVE-2017-8228) where Amcrest cloud verification for adding cameras to a user’s account is insufficient. An attacker who knows a camera’s serial number and the user’s recent reboot window can add another user’s camera to their ...
CVE-2017-8227
Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have a timeout policy to wait for 5 minutes in case 30 incorrect password attempts are detected using the Web and HTTP API interface provided by the device. However, if the same brute force attempt is performed using the ONVIF specification which...
CVE-2017-8227
Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices expose a credential-bruteforce risk via ONVIF: account lockout is bypassed, allowing credential guesswork and potential takeover. Root cause is a vulnerable ONVIF authentication path in the binary (sonia) that does not enforce the 5-minute timeou...
CVE-2017-8230
The CVE-2017-8230 entry concerns Amcrest IPM-721S devices with firmware V2.420.AC00.16.R.20160909. A low-privilege user can authenticate to the web admin interface and add a new admin account via HTTP APIs, gaining full admin capabilities. The root cause is an authorization bypass in the HTTP API...
CVE-2017-8230
On Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices, the users on the device are divided into 2 groups "admin" and "user". However, as a part of security analysis it was identified that a low privileged user who belongs to the "user" group and who has access to login in to the web administrativ...
CVE-2017-8226
Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have default credentials that are hardcoded in the firmware and can be extracted by anyone who reverses the firmware to identify them. If the firmware version V2.420.AC00.16.R 9/9/2016 is dissected using binwalk tool, one obtains a...
CVE-2017-8229
Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to download the administrative credentials. If the firmware version V2.420.AC00.16.R 9/9/2016 is dissected using binwalk tool, one obtains a user-x.squashfs.img.extracted archive which contains the filesystem set...
CVE-2017-8229
Amcrest IPM-721S devices (V2.420.AC00.16.R.20160909) are affected by CVE-2017-8229: unauthenticated attackers can download administrative credentials via exposed configuration files (e.g., /current_config) without authentication. The root cause is a misconfigured or exposed current_config path th...
CVE-2017-8227: Undefined Security Weakness
Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have a timeout policy to wait for 5 minutes in case 30 incorrect password attempts are detected using the Web and HTTP API interface provided by the device. However, if the same brute force attempt is performed using the ONVIF specification which...
CVE-2017-8228: Undefined Security Weakness
Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices mishandle reboots within the past two hours. Amcrest cloud services does not perform a thorough verification when allowing the user to add a new camera to the user's account to ensure that the user actually owns the camera other than knowing the...
PT-2019-8609
Name of the Vulnerable Software and Affected Versions Amcrest IPM-721S version V2.420.AC00.16.R.20160909 Description The issue concerns a brute force attack vulnerability. When 30 incorrect password attempts are detected using the Web and HTTP API interface, a 5-minute timeout policy is enforced...
PT-2019-8608
Name of the Vulnerable Software and Affected Versions Amcrest IPM-721S version V2.420.AC00.16.R.20160909 Description The Amcrest IPM-721S device has default credentials that are hardcoded in the firmware. These credentials can be extracted by reversing the firmware. The binary "sonia" contains th...
PT-2019-8611
Name of the Vulnerable Software and Affected Versions Amcrest IPM-721S version V2.420.AC00.16.R.20160909 Description The issue allows an unauthenticated attacker to download administrative credentials from the device. By dissecting the firmware version using the binwalk tool, a vulnerable binary...
PT-2019-8612
Name of the Vulnerable Software and Affected Versions Amcrest IPM-721S version V2.420.AC00.16.R.20160909 Description A security issue was identified in Amcrest IPM-721S devices, where a low-privileged user belonging to the "user" group can add a new administrative user to the web administrative...
PT-2019-8610
Name of the Vulnerable Software and Affected Versions Amcrest IPM-721S version V2.420.AC00.16.R.20160909 Description The Amcrest IPM-721S device mishandles reboots within the past two hours, and Amcrest cloud services do not perform thorough verification when adding a new camera to a user's...
CVE-2017-8229: Undefined Security Weakness
Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to download the administrative credentials. If the firmware version V2.420.AC00.16.R 9/9/2016 is dissected using binwalk tool, one obtains a user-x.squashfs.img.extracted archive which contains the filesystem set...
CVE-2017-8226: Use of Hard-coded Credentials
Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have default credentials that are hardcoded in the firmware and can be extracted by anyone who reverses the firmware to identify them. If the firmware version V2.420.AC00.16.R 9/9/2016 is dissected using binwalk tool, one obtains a...