PT-2023-8872 · Uniview · Uniview Ip Camera

Arko Dhar + 1 · Publicado 2023-09-19 · Atualizado 2024-03-27 · CVE-2023-0773

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Uniview IP Camera (affected versions not specified)

Description The issue is related to identification and authentication failure at the web-based management interface of Uniview IP Camera. A remote attacker could exploit this by sending specially crafted HTTP requests to the vulnerable device, potentially gaining complete control of the targeted device. The vulnerability allows remote attackers to bypass the authentication process and gain unauthorized access by sending specially crafted packets.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

BDU:2024-02512

CVE-2023-0773

Produtos afetados

Uniview Ip Camera

Referências · 14

• https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0270 · Nota
• https://t.me/cibsecurity/70701 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-0773 · Nota de Segurança
• https://twitter.com/vuldb/status/1704118535067468240 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1704067368287178991 · Publicação no Twitter
• https://t.me/true_secator/5574 · Publicação no Telegram
• https://twitter.com/DMFezzaReedCISA/status/1704364022735237166 · Publicação no Twitter
• https://t.me/freedomf0x/21288 · Publicação no Telegram
• https://twitter.com/cracbot/status/1704374871244063123 · Publicação no Twitter
• https://global.uniview.com/About_Us/Security/Notice/202309/976482_140493_0.htm · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-0773 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2024-02512 · Nota de Segurança
• https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0270 · Nota
• https://twitter.com/VulmonFeeds/status/1704117267435249980 · Publicação no Twitter