Dahua Devices - webCapsConfig Information Disclosure (CVE-2019-9680)

Multiple Dahua devices and OEMs expose /webcaps/webCapsConfig without authentication, disclosing deviceType and vendor metadata. CVE-2024-13131 was rejected as a duplicate of CVE-2019-9680. !/usr/bin/env python3 -- coding: utf-8 -- """Dahua and OEM unauthenticated webCapsConfig information...

Amcrest IP Camera - webCapsConfig Information Disclosure (CVE-2024-12984)

Amcrest IP cameras expose /webcaps/webCapsConfig without authentication, disclosing deviceType and WebVersion metadata. !/usr/bin/env python3 -- coding: utf-8 -- """Amcrest IP camera webCapsConfig information disclosure CVE-2024-12984.""" from kittysploit import from lib.protocols.http.httpclient...

CVE-2024-12984

CVE-2024-12984 affects multiple Amcrest IP camera models (IP2M-841B/W, IPC-IP2M-841B, IPC-IP3M-943B/S, IPC-IP3M-HX2B, IPC-IPM-721S). The vulnerability targets the Web Interface file /web_caps/webCapsConfig, enabling information disclosure via remote access. Public exploit information exists and t...

PT-2024-17847 · Amcrest · Amcrest Ipc-Ip3M-943B +4

Name of the Vulnerable Software and Affected Versions: Amcrest IP2M-841B versions up to 20241211 Amcrest IP2M-841W versions up to 20241211 Amcrest IPC-IP2M-841B versions up to 20241211 Amcrest IPC-IP3M-943B versions up to 20241211 Amcrest IPC-IP3M-943S versions up to 20241211 Amcrest IPC-IP3M-HX2...

Amcrest’s various products have access control error vulnerabilities

Amcrest IP2M-841B and Amcrest IP2M-841W are both products of Amcrest Corporation.Amcrest IP2M-841B is an IP camera.Amcrest IP2M-841W is a security camera. An access control error vulnerability exists in various Amcrest products, which originates in the Web Interface component of the...

CVE-2024-12984: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability classified as problematic has been found in Amcrest IP2M-841B, IP2M-841W, IPC-IP2M-841B, IPC-IP3M-943B, IPC-IP3M-943S, IPC-IP3M-HX2B and IPC-IPM-721S up to 20241211. This affects an unknown part of the file /webcaps/webCapsConfig of the component Web Interface. The manipulation...

CVE-2024-12896

The CVE concerns Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3, and VIP S4320 G2 (Web Interface) where an unknown function in /web_caps/webCapsConfig allows information disclosure. The issue can be exploited remotely and the vulnerability entry notes the exploit has been publicly disclosed; ...

PT-2024-17783 · Intelbras · Intelbras Vip S4020 G3 +3

Name of the Vulnerable Software and Affected Versions: Intelbras VIP S3020 G2 versions up to 20241222 Intelbras VIP S4020 G2 versions up to 20241222 Intelbras VIP S4020 G3 versions up to 20241222 Intelbras VIP S4320 G2 versions up to 20241222 Description: A vulnerability was found in the Web...