VulnCheck KEV: CVE-2017-8221

Wireless IP Camera P2P WIFICAM devices rely on a cleartext UDP tunnel protocol aka the Cloud feature for communication between an Android application and a camera device, which allows remote attackers to obtain sensitive information by sniffing the network...

VulnCheck KEV: CVE-2017-8224

Wireless IP Camera P2P WIFICAM devices have a backdoor root account that can be accessed with TELNET...

VulnCheck KEV: CVE-2017-8223

On Wireless IP Camera P2P WIFICAM devices, an attacker can use the RTSP server on port 10554/tcp to watch the streaming without authentication via tcp/av01 or tcp/av00...

CVE-2017-18377

An issue was discovered on Wireless IP Camera P2P WIFICAM cameras. There is Command Injection in the setftp.cgi script via shell metacharacters in the pwd variable, as demonstrated by a setftp.cgi?svr=192.168.1.1&port=21&user=ftp URI...

Command injection

An issue was discovered on Wireless IP Camera P2P WIFICAM cameras. There is Command Injection in the setftp.cgi script via shell metacharacters in the pwd variable, as demonstrated by a setftp.cgi?svr=192.168.1.1&port=21&user=ftp URI...

CVE-2017-18377

An issue was discovered on Wireless IP Camera P2P WIFICAM cameras. There is Command Injection in the setftp.cgi script via shell metacharacters in the pwd variable, as demonstrated by a setftp.cgi?svr=192.168.1.1&port=21&user=ftp URI...

CVE-2017-18377

CVE-2017-18377 affects Wireless IP Camera (P2P) WIFICAM cameras. The issue is a command injection in the set_ftp.cgi script, exploitable via shell metacharacters in the pwd parameter (example: set_ftp.cgi?svr=192.168.1.1&port=21&user=ftp). Root cause: unsanitized input passed to a shell context w...

VulnCheck KEV: CVE-2017-8225

On Wireless IP Camera P2P WIFICAM devices, access to .ini files containing credentials is not correctly checked. An attacker can bypass authentication by providing an empty loginuse parameter and an empty loginpas parameter in the URI...

Wireless IP Camera (P2P) WIFICAM Information Disclosure Vulnerability

Wireless IP Camera P2P WIFICAM is a remote IP camera. An information disclosure vulnerability exists in the Wireless IP Camera P2P WIFICAM device. The vulnerability can be exploited by an attacker to gain unauthorized access to traffic via tcp/av01 or tcp/av00...

Wireless IP Camera (P2P) WIFICAM Sensitive Information Disclosure Vulnerability (CNVD-2017-06906)

Wireless IP Camera P2P WIFICAM is a remote IP camera. A security vulnerability exists in the Wireless IP Camera P2P WIFICAM device that originates from the storage of the 'Apple Production IOS Push Services' RSA key and certificate in /system/www/pem/ck.pem in the firmware. RSA key and certificat...

Wireless IP Camera (P2P) WIFICAM Information Disclosure Vulnerability (CNVD-2017-06908)

Wireless IP Camera P2P WIFICAM is a remote IP camera. A security vulnerability exists in the Wireless IP Camera P2P WIFICAM device. The vulnerability can be exploited by an attacker to access the root account via remote access...

Wireless IP Camera (P2P) WIFICAM Sensitive Information Disclosure Vulnerability

Wireless IP Camera P2P WIFICAM is a remote IP camera. A security vulnerability exists in the Wireless IP Camera P2P WIFICAM device. A remote attacker could exploit this vulnerability by sniffing the network to obtain sensitive information...

Wireless IP Camera (P2P) WIFICAM Identity Bypass Vulnerability

Wireless IP Camera P2P WIFICAM is a remote IP camera. A security vulnerability exists in the Wireless IP Camera P2P WIFICAM device that stems from the program failing to properly check the access permissions of the .ini file. An attacker can exploit this vulnerability to bypass authentication...

Wireless IP Camera (P2P) WIFICAM Cameras Remote Code Execution

A code execution vulnerability exists in multiple Wireless IP Camera P2P WIFICAM cameras. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2017-8225

On Wireless IP Camera P2P WIFICAM devices, access to .ini files containing credentials is not correctly checked. An attacker can bypass authentication by providing an empty loginuse parameter and an empty loginpas parameter in the URI...

CVE-2017-8221

Wireless IP Camera P2P WIFICAM devices rely on a cleartext UDP tunnel protocol aka the Cloud feature for communication between an Android application and a camera device, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2017-8222

Wireless IP Camera P2P WIFICAM devices have an "Apple Production IOS Push Services" private RSA key and certificate stored in /system/www/pem/ck.pem inside the firmware, which allows attackers to obtain sensitive information...

CVE-2017-8224

CVE-2017-8224 involves Wireless IP Camera (P2P) WIFICAM devices with multiple GoAhead-based vulnerabilities. Public disclosures detail a backdoor root account accessible via TELNET, enabling unauthenticated root access on affected devices, and a pre-auth information-leak in the GoAhead HTTP serve...

CVE-2017-8221

CVE-2017-8221 affects Wireless IP Camera (P2P) WIFICAM devices using the GoAhead HTTP server. The issue combines a pre-auth info leak in the GoAhead web UI that exposes credentials (via system.ini and related files) when accessed with certain URIs, with an authenticated RCE path through the GoAhe...

CVE-2017-8225

CVE-2017-8225 is a pre-auth information disclosure in GoAhead-powered Wireless IP Camera (P2P) WIFICAM devices. The vulnerability lets an unauthenticated attacker bypass login by supplying empty loginuse/loginpas in the URI, enabling access to credentials stored in .ini/config files via the HTTP ...