89 matches found
CVE-2023-31594
CVE-2023-31594 La IC Realtime ICIP-P2012T es vulnerable a un Control de Acceso Incorrecto Canal de transmisión sin autenticación en la cámara domo PTZ IP IC Realtime ICIP-P2012, versión de software: 2.420 La transmisión en vivo MJPEG se puede reproducir a través de un canal HTTP expuesto utilizan...
CVE-2026-88285
GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service without authentication, allowing remote clients to retrieve PTZ information and issue PTZ or raw serial commands...
CVE-2026-88286
GeoVision GV-LPC2211 V1.13 improperly manages PTZ connection state, allowing an unauthenticated remote client to block the accept loop and prevent new PTZ connections...
CVE-2026-88286 GV-LPC2011/LPC2211 - PTZ Connection-State Accept-Loop Denial of Service
GeoVision GV-LPC2211 V1.13 improperly manages PTZ connection state, allowing an unauthenticated remote client to block the accept loop and prevent new PTZ connections...
EUVD-2026-75320
GeoVision GV-LPC2211 V1.13 improperly manages PTZ connection state, allowing an unauthenticated remote client to block the accept loop and prevent new PTZ connections...
CVE-2026-88286 GV-LPC2011/LPC2211 - PTZ Connection-State Accept-Loop Denial of Service
GeoVision GV-LPC2211 V1.13 improperly manages PTZ connection state, allowing an unauthenticated remote client to block the accept loop and prevent new PTZ connections...
CVE-2026-88286
GeoVision GV-LPC2211 V1.13 (also referenced as GV-LPC2011) contains a denial of service vulnerability in its PTZ connection-state management . An unauthenticated remote client can exploit improper handling of PTZ connection state to block the accept loop , preventing new PTZ connections and effec...
CVE-2026-88285 GV-LPC2011/LPC2211 - Unauthenticated PTZ Control Service
GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service without authentication, allowing remote clients to retrieve PTZ information and issue PTZ or raw serial commands...
CVE-2026-88285 GV-LPC2011/LPC2211 - Unauthenticated PTZ Control Service
GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service without authentication, allowing remote clients to retrieve PTZ information and issue PTZ or raw serial commands...
CVE-2026-88285
GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service that requires no authentication, allowing remote clients to retrieve PTZ information and issue PTZ or raw serial commands. The underlying cause is the lack of an authentication mechanism on the service itself. The CVSS v3...
EUVD-2026-75319
GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service without authentication, allowing remote clients to retrieve PTZ information and issue PTZ or raw serial commands...
PT-2026-89326
🚨 CRITICAL: CVE-2026-88285 CVSS 9.4 GeoVision GV-LPC2211 V1.13 exposes unauthenticated PTZ control service. Remote attackers can retrieve PTZ info & issue commands over the network. Patch immediately. CVE PatchNow https://t.co/aE8CWkDyXw...
CVE-2026-88286: Uncontrolled Resource Consumption
GeoVision GV-LPC2211 V1.13 improperly manages PTZ connection state, allowing an unauthenticated remote client to block the accept loop and prevent new PTZ connections...
CVE-2026-88285: Missing Authentication for Critical Function
GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service without authentication, allowing remote clients to retrieve PTZ information and issue PTZ or raw serial commands...
PT-2026-89327
🚨 HIGH Severity Alert CVE-2026-88286 | CVSS 7.5 GeoVision GV-LPC2211 V1.13 camera vulnerable to unauthenticated DoS attack on PTZ connections. Remote attackers can block new PTZ connections without authentication. Patch immediately. CVE PatchNow https://t.co/82pJfPEDwE...
motionEye's missing authentication on ActionHandler allows unauthenticated camera action execution
SummaryThe ActionHandler.post method in motionEye has no authentication decorator, allowing any unauthenticated attacker to trigger camera actions including snapshots, recording start/stop, and configured action scripts PTZ controls, alarm triggers, etc.. Vulnerability DetailsFile:...
PT-2026-34337
My last CVE-2026-31077 of China PTZ camera lead to RCE + RTSP video stream over LAN network. The camera uses the app named “CareCamPro” with +1m downloads on Play Store https://t.co/S0T5XS8udh...
Honeywell多款产品 访问控制错误漏洞
Honeywell I-HIB2PI-UL 2MP, etc., are products of the American company Honeywell. The Honeywell I-HIB2PI-UL 2MP is an infrared dome camera. The Honeywell SMB NDAA MVO-3 is an infrared gimbal camera. The Honeywell PTZ WDR 2MP 32M is a series of night vision cameras. Several Honeywell products have...
CVE-2025-14749
A vulnerability was identified in Ningyuanda TC155 57.0.2.0. This impacts an unknown function of the file /onvif/deviceservice of the component ONVIF PTZ Control Interface. The manipulation leads to improper access controls. The attack requires being on the local network. The exploit is publicly...
CVE-2025-14749 Ningyuanda TC155 ONVIF PTZ Control device_service access control
A vulnerability was identified in Ningyuanda TC155 57.0.2.0. This impacts an unknown function of the file /onvif/deviceservice of the component ONVIF PTZ Control Interface. The manipulation leads to improper access controls. The attack requires being on the local network. The exploit is publicly...