CVE-2020-25747

CVE-2020-25747 제안된 설명 Rubetek RV-3406, RV-3409, RV-3411 카메라펌웨어 버전 v342, v339의 Telnet 서비스는 원격 공격자가 인증 없이 RTSP 및 ONFIV 서비스에 접근할 수 있게 합니다. 따라서 공격자는 카메라의 라이브 스트림을 시청하고, 카메라를 회전시키고, 일부 설정밝기, 선명도, 시간을 변경하고, 카메라를 다시 시작하거나 공장 설정으로 재설정할 수 있습니다. 추가 정보 취약점에 대해 공급업체에 서신이 발송되었습니다. 취약점 유형 잘못된 접근 제어 제품 공급업체...

CVE-2020-25748

CVE-2020-25748 推奨説明 Rubetek RV-3406、RV-3409、RV-3411 カメラ（ファームウェアバージョン v342、v339）において、平文送信の問題が発見されました。中間者がカメラからの映像データを傍受および改ざんすることができます。このデータは暗号化されていない形式で送信されます。また、NTP および RTSP サーバーからの応答を改ざんし、カメラに変更された値を使用させることも可能です。 追加情報 脆弱性に関する通知がベンダーに送付されました。 脆弱性タイプ（その他） CWE-319: 機密情報の平文送信 製品ベンダー Rubetek...

CVE-2020-25749

CVE-2020-25749 Suggested description Rubetek 카메라 RV-3406, RV-3409, RV-3411 펌웨어 버전 v342, v339의 Telnet 서비스는 원격 공격자가 높은 권한을 가진 계정으로 장치를 완전히 제어할 수 있도록 허용할 수 있습니다. 이 취약점은 시스템 계정에 기본 정적 암호가 있기 때문에 존재합니다. Telnet 서비스를 비활성화할 수 없으며 이 암호는 표준 기능을 통해 변경할 수 없습니다. Additional Information 취약점에 대해 공급업체에 편지가 발송되었습니...

EUVD-2020-18401

Malware in sbrugna...

EUVD-2020-18399

Malware in sbrugna...

EUVD-2020-18400

Malware in sbrugna...

CVE-2020-25749

The Telnet service of Rubetek cameras RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339 could allow an remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static password. The Telne...

CVE-2020-25748

A Cleartext Transmission issue was discovered on Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339. Someone in the middle can intercept and modify the video data from the camera, which is transmitted in an unencrypted form. One can also modify responses from NTP and RTSP...

The vulnerability of the Telnet service provided by the microprogramming software for Wi-Fi cameras from Rubetek, models RV-3406, RV-3409, and RV-3411, allows a intruder to gain unauthorized access to the RTSP and ONVIF services.

The vulnerability of the Telnet service provided by the Wi-Fi cameras of Rubetek models RV-3406, RV-3409, and RV-3411 is related to authentication deficiencies. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to RTSP and ONFIV services. This...

CVE-2020-25747

The Telnet service of Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339 can allow a remote attacker to gain access to RTSP and ONFIV services without authentication. Thus, the attacker can watch live streams from the camera, rotate the camera, change some settings...

CVE-2020-25748

A Cleartext Transmission issue was discovered on Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339. Someone in the middle can intercept and modify the video data from the camera, which is transmitted in an unencrypted form. One can also modify responses from NTP and RTSP...

CVE-2020-25749

The Telnet service of Rubetek cameras RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339 could allow an remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static password. The Telne...

CVE-2020-25749

The Telnet service of Rubetek cameras RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339 could allow an remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static password. The Telne...

CVE-2020-25748

A Cleartext Transmission issue was discovered on Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339. Someone in the middle can intercept and modify the video data from the camera, which is transmitted in an unencrypted form. One can also modify responses from NTP and RTSP...

Design/Logic Flaw

A Cleartext Transmission issue was discovered on Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339. Someone in the middle can intercept and modify the video data from the camera, which is transmitted in an unencrypted form. One can also modify responses from NTP and RTSP...

Default credentials

The Telnet service of Rubetek cameras RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339 could allow an remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static password. The Telne...

CVE-2020-25749

The CVE-2020-25749 entry applies to Rubetek RV-3406, RV-3409, and RV-3411 cameras (firmware v342, v339). Root cause: a system account uses a default, static password for Telnet. Consequence: Telnet cannot be disabled and the password cannot be changed via standard functionality, enabling a remote...

CVE-2020-25749

The Telnet service of Rubetek cameras RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339 could allow an remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static password. The Telne...

CVE-2020-25748

A Cleartext Transmission issue was discovered on Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339. Someone in the middle can intercept and modify the video data from the camera, which is transmitted in an unencrypted form. One can also modify responses from NTP and RTSP...

CVE-2020-25747

The Telnet service of Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339 can allow a remote attacker to gain access to RTSP and ONFIV services without authentication. Thus, the attacker can watch live streams from the camera, rotate the camera, change some settings...