CVE-2018-6479

Netwave IP Camera devices are affected by CVE-2018-6479. The vulnerability allows an unauthenticated attacker to crash a device by sending a POST request with a huge body to the root path (/) of the device. The issue is described consistently across multiple sources (e.g., Red Hat advisory and CN...

CVE-2018-11654

CVE-2018-11654 affects Netwave IP cameras via information disclosure in the get_status.cgi endpoint over HTTP (port 8000). The vulnerability allows an unauthenticated attacker to exfiltrate sensitive information from the device. Affected component: Netwave IP camera firmware/web server exposing g...

CVE-2018-11653

CVE-2018-11653 affects Netwave IP cameras. The root cause is an information-disclosure in the //etc/RT2870STA.dat file accessible via HTTP on port 8000, enabling an unauthenticated attacker to exfiltrate sensitive network configuration data (SSID and passwords). Public sources in the connected do...