PT-2023-10705 · Abus · Abus Tvip Cameras

A2Nkf + 5 · Publicado 2023-10-26 · Atualizado 2024-09-11 · CVE-2018-17559

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ABUS TVIP cameras (affected versions not specified)

Description The issue is related to incorrect access control, allowing unauthenticated remote attackers to view the "/video.mjpg" video stream.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Link Following

Improper Access Control

Enumeração de Fraquezas

CWE-59

CWE-284

Identificadores relacionados

CVE-2018-17559

Produtos afetados

Abus Tvip Cameras

Referências · 7

• 🔥 https://sec.maride.cc/posts/abus/#cve-2018-17559 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-17559 · Nota de Segurança
• https://t.me/cvenotify/60064 · Publicação no Telegram
• https://ccc.de/en/updates/2019/update-nicht-verfugbar-hersteller-nicht-zu-erreichen · Nota
• https://t.me/cibsecurity/73031 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1717653728394912159 · Publicação no Twitter
• https://t.me/cvenotify/94183 · Publicação no Telegram