CVE-2018-18602

The CVE-2018-18602 issue pertains to Guardzilla smart cameras where the Cloud API allows user enumeration, enabling arbitrary camera access and monitoring. Affected software appears to be the Guardzilla Cloud API and associated Guardzilla cameras. The root cause described across sources is user e...

CVE-2018-18600

The CVE-2018-18600 issue affects Guardzilla GZ180 devices, where the remote upgrade feature is vulnerable to command injection via a crafted new firmware version parameter. The vulnerability can lead to shell access and execution of system commands (as described by CNVD-2019-00833 and related sou...