93 matches found
CVE-2019-7673
An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. Administrator Credentials are stored in the 13-character DES hash format...
CVE-2009-5154
CVE-2009-5154 affects MOBOTIX S14 MX-V4.2.1.61 where the admin account uses a default password, meinsm . The vulnerability enables network access with no privileges required and no user interaction, with high impact on confidentiality, integrity, and availability (per CVSS metrics). No remediatio...
CVE-2019-7674
An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. /admin/access accepts a request to set the "aaaaa" password, considered insecure for some use cases, from a user...
CVE-2019-7673
The vulnerability CVE-2019-7673 affects MOBOTIX S14 MX-V4.2.1.61 devices. The issue is that Administrator credentials are stored using a 13-character DES hash format, i.e., a weak cryptographic representation for admin credentials. This is documented in multiple feeds (e.g., Tenable plugin notes ...
CVE-2019-7675
MOBOTIX S14 MX-V4.2.1.61 devices are affected by CVE-2019-7675, where the default management interface is served over cleartext HTTP with Basic Authentication (/admin/index.html). This exposes credentials in transit, enabling potential interception of authentication material and unauthorized acce...
CVE-2019-7674
The CVE concerns MOBOTIX S14 MX-V4.2.1.61 devices where the /admin/access endpoint accepts a request to set the password to a fixed value (the string “aaaaa”). This represents an authentication weakness enabling password change by an authorized or potentially any user, depending on access control...
CVE-2019-7675
An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. The default management application is delivered over cleartext HTTP with Basic Authentication, as demonstrated by the /admin/index.html URI...
Mobotix Webcam Default Credentials (HTTP)
The remote Mobotix Webcam is using known default credentials. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
Mobotix Webcam Detection
HTTP based detection of Mobotix Webcam devices. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MOBOTIX Video Security Cameras - CSRF Add Admin Exploit
No description provided by source...
MOBOTIX Video Security Cameras - Cross-Site Request Forgery (Add Admin)
Exploit for hardware platform in category web applications !-- MOBOTIX Video Security Cameras CSRF Add Admin Exploit Vendor: MOBOTIX AG Product web page: https://www.mobotix.com Affected version: Model: D22M-Secure, HW: T2r1.1.AA, 520 MHz, 128 MByte RAM, SW: MX-V3.5.2.23.r3 Model: Q24M-Secure, HW...
MOBOTIX Video Security Cameras - Cross-Site Request Forgery (Add Admin)
Add admin user Testingus: -------------------------...
MOBOTIX Video Security Cameras - Cross-Site Request Forgery (Add Admin)
MOBOTIX Video Security Cameras - Cross-Site Request Forgery Add Admin...
MOBOTIX Video Security Cameras Cross Site Request Forgery
Add admin user Testingus: ------------------------- fo...
MOBOTIX Video Security Cameras CSRF Add Admin Exploit
Summary MOBOTIX is a German System Manufacturer of Professional Video Management VMS and Smart IP Cameras. These cameras support all standard features of MOBOTIX IP cameras like automatic object detection, messaging via network and onboard or network recording. The dual lens thermal system suppor...
Mobotix Cameras Default Admin Credentials (HTTP)
The remote Mobotix camera web interface is using default credentials. This VT has been deprecated as a duplicate of the VT SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
obotix IP Camera M1 1.9.4 .7/M10 2.0.5 .2 events.tar source_ip Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/18022/info The Mobotix IP camera is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the device to properly sanitize user-supplied input. An attacker may leverage these issues t...
obotix IP Camera M1 1.9.4 .7/M10 2.0.5 .2 help Script XSS
No description provided by source. source: http://www.securityfocus.com/bid/18022/info The Mobotix IP camera is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the device to properly sanitize user-supplied input. An attacker may leverage these issues t...
obotix IP Camera M1 1.9.4 .7/M10 2.0.5 .2 eventplayer get_image_info_abspath Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/18022/info The Mobotix IP camera is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the device to properly sanitize user-supplied input. An attacker may leverage these issues t...
mobotixXSS.txt
Mobotix IP Network Cameras Multiple XSS Version: Tested on M1 and M10 - M10-V2.0.5.2 - M1-V1.9.4.7 Discovered by: jaime.blascoateazeldot.es http://www.eazel.es Description: Mobotix is vulnerable to multiple security vulnerabilites that allow cross site scripting flaws. Due to improper filtering a...