Vulners
Lucene search
Lorex LNC116 / LNC104 IP Camera Authentication Bypass Vulnerability
| Reporter | Title | Published | Views | Family All 9 |
|---|---|---|---|---|
 | CVE-2012-6451 | 24 Jan 202014:31 | – | cve |
 | CVE-2012-6451 | 24 Jan 202014:31 | – | cvelist |
 | EUVD-2012-6304 | 7 Oct 202500:30 | – | euvd |
 | CVE-2012-6451 | 24 Jan 202015:15 | – | nvd |
 | Lorex LNC116 / LNC104 IP Camera Authentication Bypass | 5 Feb 201300:00 | – | packetstorm |
 | Authentication flaw | 24 Jan 202015:15 | – | prion |
 | CVE-2012-6451 | 22 May 202505:04 | – | redhatcve |
 | CVE-2012-6451 Authentication Bypass in LOREX IP Cameras | 11 Feb 201300:00 | – | securityvulns |
| Lorex IP cameras authenticaiton bypass | 11 Feb 201300:00 | – | securityvulns |
Product: Lorex LNC116 and LNC104 IP Cameras
Vendor: LOREX Technology Inc.
Vulnerability Type: Authentication Bypass
Vulnerable Firmware Version(s): 030312 and earlier
Tested Firmware Version: 030312
Fixed Firmware Version: 030405
Solution Status: Fixed by Vendor
Vendor Notification: December 22, 2012
Public Disclosure: February 5, 2013
CVE Reference: CVE-2012-6451
Credit: Jason Doyle / Twitter @jasond0yle
Advisory Details:
The camera’s web interface uses HTTP Basic for authentication, but authentication details are only validated on the
home login page. By forced browsing, or navigating directly to any valid URL on the web interface other than the
homepage, it is possible to bypass authentication.
Risk:
It's possible to view the live video feed and/or change all configurable settings anonymously.
Proof of Concept:
Navigate directly to http://x.x.x.x/cgi-bin/display.cgi to view the camera’s live video feed anonymously.
Solution:
Upgrade to firmware version 030405.
# 0day.today [2018-04-07] #Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
06 Feb 2013 00:00Current
9.4High risk
Vulners AI Score9.4
EPSS0.018