Information disclosure

The manage users profile services of the network camera device allows an authenticated. Remote attackers can modify URL parameters and further amend user’s information and escalate privileges to control the devices...

CVE-2021-30167

The CVE-2021-30167 entry describes an authentication-based vulnerability in MERIT LILIN IP cameras where the manage users profile services allow an authenticated remote attacker to modify URL parameters and amend user information, enabling privilege escalation to control the device. Affected prod...

CVE-2021-30167 MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Broken Authentication

The manage users profile services of the network camera device allows an authenticated. Remote attackers can modify URL parameters and further amend user’s information and escalate privileges to control the devices...

Unauthorized Access Vulnerability in Network Camera WV-SPW631L

Panasonic China Co., Ltd. is a manufacturer primarily responsible for carrying out sales and after-sales service activities for home appliances, systems, environments, components and other goods. An unauthorized access vulnerability exists in Network Camera WV-SPW631L, which can be exploited by...

PT-2021-18641 · Unknown · Network Camera Device

Name of the Vulnerable Software and Affected Versions: Network camera device affected versions not specified Description: The issue concerns the manage users profile services of the network camera device, which allows an authenticated remote attacker to modify URL parameters and amend a user's...

network camera device 访问控制错误漏洞

Edimax Technology wireless network camera is a network device from Edimax Technology, China. It provides a video recording function. A security vulnerability exists in the network camera device that allows user authentication. A remote attacker can exploit this vulnerability to modify URL...

CVE-2021-30165 EDIMAX Technology Co., Ltd. HD Wireless Day & Night Network Camera IC-3140W - Hard-coded password

The default administrator account & password of the EDIMAX wireless network camera is hard-coded. Remote attackers can disassemble firmware to obtain the privileged permission and further control the devices...

CVE-2021-30165

CVE-2021-30165 affects EDIMAX wireless network cameras (e.g., IC-3140W) where the default administrator account and password are hard-coded. The root cause is a hard-coded credential that enables remote attackers to disassemble firmware and obtain privileged permissions, allowing potential full c...

Unauthorized Access Vulnerability in Network Camera BB-SW175A at Panasonic (China) Co.

Panasonic China Co., Ltd. is mainly responsible for carrying out sales and after-sales service activities for home appliances, systems, environments, components and other goods. An unauthorized access vulnerability exists in Network Camera BB-SW175A of Panasonic China Co. which can be exploited b...

Unauthorized Access Vulnerability in TRENDnet TV-IP121W

The TV-IP121W is a wireless network camera from TRENDnet. An unauthorized access vulnerability exists in the TRENDnet TV-IP121W, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in MOBOTIX M25

MOBOTIX is a world-renowned leader in network camera technology and has been producing pure megapixel cameras for many years and is ranked as the global market leader. MOBOTIX M25 suffers from an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Network Camera BB-SW172A at Panasonic (China) Co.

Panasonic China Co., Ltd. is mainly responsible for carrying out sales and after-sales service activities for home appliances, systems, environments, components and other goods. An unauthorized access vulnerability exists in Network Camera BB-SW172A of Panasonic China Co. that can be exploited by...

INSMA Wifi Mini Spy 1080P HD Security IP Camera 跨站请求伪造漏洞

INSMA Wifi Mini Spy 1080P HD Security IP Camera is a camera from INSMA USA. The INSMA Wifi Mini Spy 1080P HD Security IP Camera version 1.9.7 B suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to access the web via all fields...

ELECOM WRC-300FEBK-S Certificate Validation Error Vulnerability

The ELECOM WRC-300FEBK-S is a network camera for the home from Elecom Japan. A certificate validation error vulnerability exists in the ELECOM WRC-300FEBK-S, which can be exploited by an attacker to alter the communication response and execute arbitrary commands on the product...

Sony IPELA Network Camera 1.82.01 - (ftpclient.cgi) Remote Stack Buffer Overflow Exploit

Exploit Title: Sony IPELA Network Camera 1.82.01 - 'ftpclient.cgi' Remote Stack Buffer Overflow Google Dork: Server: Mida eFramework Exploit Author: LiquidWorm Vendor Homepage: https://pro.sony Version: = 1.82.01 !/usr/bin/env python Sony IPELA Network Camera ftpclient.cgi Remote Stack Buffer...

Sony IPELA Network Camera Remote Stack Buffer Overflow

!/usr/bin/env python Sony IPELA Network Camera ftpclient.cgi Remote Stack Buffer Overflow Vendor: Sony Electronics Inc. Product web page: https://pro.sony Affected version: SNC-DH120T v1.82.01 Summary: IPELA is Sony's vision of the ultimate workplace, designed to revolutionize the way business...

Sony IPELA Network Camera 1.82.01 - 'ftpclient.cgi' Remote Stack Buffer Overflow

Exploit Title: Sony IPELA Network Camera 1.82.01 - 'ftpclient.cgi' Remote Stack Buffer Overflow Google Dork: Server: Mida eFramework Date: 2020-09-30 Exploit Author: LiquidWorm Vendor Homepage: https://pro.sony Version: = 1.82.01 !/usr/bin/env python Sony IPELA Network Camera ftpclient.cgi Remote...

Buffer Overflow Vulnerability in Multiple TP-Link Products

The TP-Link NC200 and others are a network camera from China P&L TP-Link. A buffer overflow vulnerability exists in several TP-LINK products. An attacker can exploit this vulnerability to cause the ipcamera process to crash or possibly execute arbitrary code with root privileges...

CVE-2020-11950

CVE-2020-11950 affects VIVOTEK Network Cameras prior to XXXXX-VVTK-2.2002.xx.01x and prior to XXXXX-VVTK-0XXXX_Beta2, where an authenticated user can upload and execute a script, resulting in OS command execution (example affected device: IT9388-HT).

Multiple Dahua Products Input Validation Error Vulnerability (CNVD-2020-22980)

Dahua SD6AL Series and so on are the products of Dahua, China.SD6AL Series is a network camera of SD6AL series.NVR 5x Series is a network video recorder of 5x series.IPC-HX2XXX Series is a network camera of IPC-HX2XXX series.NVR 5x Series is a network video recorder of 5x series.NVR 5x Series is ...