Hypernyan

Name of the Vulnerable Software and Affected Versions: FNKvision Y215 CCTV Camera version 10.194.120.40 Description: A vulnerability exists in the FNKvision Y215 CCTV Camera due to hard-coded credentials within the `/etc/passwd` file of the Firmware component. Local access is required for exploitation. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: FNKvision Y215 CCTV Camera version 10.194.120.40 Description: A security flaw exists in FNKvision Y215 CCTV Camera version 10.194.120.40. The issue involves information disclosure through manipulation of an unknown part of the file `/tmp/wpa supplicant.conf`. The attack requires physical access to the device and is considered difficult to exploit. The exploit has been publicly released. The vendor was contacted regarding this disclosure but did not respond. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: FNKvision Y215 CCTV Camera version 10.194.120.40 Description: A weakness has been identified in the FNKvision Y215 CCTV Camera. This vulnerability affects unknown code within the `s1 rf test config` file of the Telnet Service component, potentially leading to a backdoor. The physical device is targetable for this attack, which is characterized by high complexity and difficult exploitability. The exploit has been made publicly available and may be exploited. The vendor was contacted regarding this disclosure but did not respond. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: FNKvision Y215 CCTV Camera version 10.194.120.40 Description: A security issue has been identified in FNKvision Y215 CCTV Camera. The `crypt` function within the `/etc/passwd` file utilizes a weak hash, potentially allowing for local privilege escalation. The attack requires local access and is considered difficult to exploit. The exploit has been publicly disclosed, and the vendor was notified but did not respond. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.