Daniele Linguaglossa

**Name of the Vulnerable Software and Affected Versions** RAVPower FileHub version 2.000.056 **Description** The issue allows remote users to steal sensitive information by sending a crafted HTTP request. **Recommendations** For version 2.000.056, update to a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** RAVPower Filehub version 2.000.056 **Description** The issue is related to the HTTP Server in the RAVPower Filehub, where an unrestricted upload feature and a path traversal vulnerability allow uploading a file on the filesystem with root privileges, leading to remote code execution as root. The vulnerability exists due to insufficient restrictions on the directory path name and a lack of limitations on file uploads. This can be exploited by a remote attacker to execute arbitrary code with root privileges. **Recommendations** For RAVPower Filehub version 2.000.056, consider restricting access to the HTTP Server until a patch is available. As a temporary workaround, disabling the upload feature can help minimize the risk of exploitation. Additionally, limiting directory access and implementing proper path validation can also reduce the vulnerability to remote code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: MASTER IPCAMERA01 version 3.3.4.2103 Description: The issue allows for unauthenticated configuration changes. This is demonstrated by the ability to modify the port number of the web server. Recommendations: For MASTER IPCAMERA01 version 3.3.4.2103, consider restricting access to the web server configuration to prevent unauthorized changes until a fix is available.

Name of the Vulnerable Software and Affected Versions: MASTER IPCAMERA01 version 3.3.4.2103 Description: The issue allows remote attackers to obtain sensitive information via a crafted HTTP request. This can include accessing the `username`, `password`, and configuration settings. Recommendations: For version 3.3.4.2103, consider restricting access to the device until a patch is available. As a temporary workaround, avoid using default or weak passwords for the `username` and `password` fields. Additionally, limit access to configuration settings to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** MASTER IPCAMERA01 version 3.3.4.2103 **Description** The issue is related to the use of hardcoded credentials in the device's software. Specifically, the root account has a hardcoded password of `cat1029`. This could allow a remote attacker to gain access to the device with root privileges. **Recommendations** For MASTER IPCAMERA01 version 3.3.4.2103, consider changing the root account password to a unique and strong password as soon as possible to mitigate the risk of exploitation. As a temporary workaround, restrict access to the device to minimize the risk of unauthorized access until a more permanent solution is available.

**Name of the Vulnerable Software and Affected Versions** MASTER IPCAMERA01 version 3.3.4.2103 **Description** The issue is related to unauthenticated configuration download and upload in the MASTER IPCAMERA01 device. This can be exploited through the `restore.cgi` endpoint, allowing a remote attacker to impact the confidentiality, integrity, and availability of protected information. **Recommendations** For MASTER IPCAMERA01 version 3.3.4.2103, as a temporary workaround, consider restricting access to the `restore.cgi` endpoint until a patch is available. Additionally, limit configuration downloads and uploads to authorized personnel only. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Acunetix Web Vulnerability Scanner (WVS) versions prior to 10 build 20151125 **Description** The issue allows local users to gain privileges via a command parameter in the `reporttemplate` property in a `params` JSON object to the "api/addScan" API endpoint. **Recommendations** For versions prior to 10 build 20151125, update to a version newer than 10 build 20151125 to resolve the issue. As a temporary workaround, consider restricting access to the "api/addScan" API endpoint to minimize the risk of exploitation. Avoid using the `reporttemplate` property in the `params` JSON object until the issue is resolved.