CVE-2023-22370

CVE-2023-22370 is a stored cross-site scripting vulnerability in PLANEX Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G (all versions). The issue allows a network-adjacent authenticated attacker to inject arbitrary scripts via the device’s web interface. Root cause per the sources is a store...

CVE-2023-22376

CVE-2023-22376 describes a reflected cross-site scripting (XSS) vulnerability in PLANEX COMMUNICATIONS Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G (all versions). Public sources consistently identify the affected component as the web interface handling user input that is reflected back t...

JVN#98612206: Multiple vulnerabilities in PLANEX COMMUNICATIONS Network Camera CS-WMV02G

Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G provided by PLANEX COMMUNICATIONS INC. contains multiple vulnerabilities listed below. Stored cross-site scripting CWE-79 - CVE-2023-22370 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N| Base Score: 4.8...

CVE-2023-23120

The use of the cyclic redundancy check CRC algorithm for integrity check during firmware update makes TRENDnet TV-IP651WI Network Camera firmware version v1.07.01 and earlier vulnerable to firmware modification attacks. An attacker can conduct a man-in-the-middle MITM attack to modify the new...

CVE-2023-23120

CVE-2023-23120 affects TRENDnet TV-IP651WI Network Camera firmware versions v1.07.01 and earlier. The root cause is using a CRC-based integrity check during firmware updates, which can be bypassed in a MITM scenario to modify the firmware image. The provided documents state the vulnerability but ...

CISA Releases Twelve Industrial Control Systems Advisories

CISA released twelve Industrial Control Systems ICS advisories on January 12, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories for...

Weak Password Vulnerability in Real-time H.264 IP Camera Monitoring System of Shenzhen Foscombe Intelligent Technology Co.

Shenzhen Foscombe Intelligent Technology Co., Ltd. is a high-tech company headquartered in Shenzhen, Guangdong Province, specializing in network camera products. Real-time H.264 IP Camera Monitoring System of Shenzhen Foscombe Intelligent Technology Co., Ltd. suffers from a weak password...

The vulnerability of the /ptipupgrade.cgi component of the network camera software for video surveillance devices like ISnex HC-IP9100HD and ISnex HC-IP9050HD allows a intruder to gain full access to the device.

The vulnerability of the /ptipupgrade.cgi component of the ISnex HC-IP9100HD and ISnex HC-IP9050HD network camera microprogramming software is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to gain full access to the device through a specially...

Cellinx NVT IP PTZ 安全漏洞

Cellinx NVT IP PTZ is a camera device from Cellinx Korea. A security vulnerability exists in Cellinx NVT IP PTZ, where an attacker can elevate web access to administrative privileges and allow changes to various camera configurations by modifying the following cookie values "isadmin", "showConfig...

PT-2022-11421 · Xiongmai · Xiaongmai Ahb7804R-Els +4

Name of the Vulnerable Software and Affected Versions: Xiaongmai AHB7008T-MH-V2 Xiaongmai AHB7804R-ELS Xiaongmai AHB7804R-MH-V2 Xiaongmai AHB7808R-MS-V2 Xiaongmai AHB7808R-MS Xiaongmai AHB7808T-MS-V2 Xiaongmai AHB7804R-LMS HI3518 50H10L S39 version V4.02.R11.7601.Nat.Onvif.20170420 HI3518 50H10L...

Sricam IP CCTV Camera Out-of-Bounds Write Vulnerability

Sricam IP CCTV Camera is a network camera from Sricam China.An out-of-bounds write vulnerability exists in Sricam Device Viewer. An attacker can exploit this vulnerability to cause memory corruption...

Trendnet IP-110wn prefix parameter cross-site scripting vulnerability

Trendnet IP-110wn is a wireless network camera from Trendnet. A cross-site scripting vulnerability exists in the Trendnet IP-110wn camera fwtv-ip110wnv2 1.2.2.68 version, which stems from a lack of checksum filtering of user-supplied and output data in the prefix parameter in /admin/general.cgi. ...

Sricam IP CCTV Camera 缓冲区错误漏洞

Sricam IP CCTV Camera is a network camera from Sricam China.An out-of-bounds write vulnerability exists in Sricam Device Viewer. An attacker can exploit this vulnerability to cause memory corruption...

Sricam IP CCTV Camera 缓冲区错误漏洞

Sricam IP CCTV Camera is a network camera from Sricam China.An out-of-bounds write vulnerability exists in Sricam Device Viewer. An attacker can exploit this vulnerability to cause memory corruption...

Panasonic Sanyo CCTV Network Camera 2.03-0x - Cross-Site Request Forgery (Change Password)

Exploit Title: Panasonic Sanyo CCTV Network Camera 2.03-0x - 'Disable Authentication / Change Password' CSRF Date: 13.07.2021 Exploit Author: LiquidWorm Vendor Homepage: https://www.panasonic.com !-- Panasonic Sanyo CCTV Network Camera 2.03-0x CSRF Disable Authentication / Change Password Vendor:...

Panasonic Sanyo CCTV Network Camera 2.03-0x Cross Site Request Forgery

!-- Panasonic Sanyo CCTV Network Camera 2.03-0x CSRF Disable Authentication / Change Password Vendor: Panasonic Corporation | SANYO Electric Co., Ltd. Product web page: https://www.panasonic.com https://www.sanyo-av.com https://panasonic.net/sanyo/cs/index.html Affected version: Model: VCC-HD5600...

Unauthorized Access Vulnerability in AXIS 207W Network Camera

207W Network Camera is a network camera. An unauthorized access vulnerability exists in AXIS 207W Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Axis P1425-LE-Network-Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in Axis P1425-LE-Network-Camera, which can be exploited by an attacker to obtain sensitive information...

Unauthorized Access Vulnerability in Network Camera WV-SFV311 at Panasonic (China) Co.

Network Camera WV-SFV311 is a network camera. An unauthorized access vulnerability exists in the Network Camera WV-SFV311 of Panasonic China Co. that can be exploited by an attacker to obtain sensitive information...

Unauthorized Access Vulnerability in Axis P5624-E Network Camera

The P5624-E Network Camera is a network camera. An unauthorized access vulnerability exists in the Axis P5624-E Network Camera, which can be exploited by an attacker to obtain sensitive information...