CVE-2018-6479

Netwave IP Camera devices are affected by CVE-2018-6479. The vulnerability allows an unauthenticated attacker to crash a device by sending a POST request with a huge body to the root path (/) of the device. The issue is described consistently across multiple sources (e.g., Red Hat advisory and CN...

CVE-2018-11654

An information disclosure vulnerability exists in Netwave IP cameras within the get_status.cgi file. This flaw allows an unauthenticated attacker to exfiltrate sensitive information from the device via HTTP on port 8000 . While the vulnerability is documented as a WillNotFix in some security scan...

CVE-2018-11653

CVE-2018-11653 affects Netwave IP cameras. The root cause is an information-disclosure in the //etc/RT2870STA.dat file accessible via HTTP on port 8000, enabling an unauthenticated attacker to exfiltrate sensitive network configuration data (SSID and passwords). Public sources in the connected do...