PT-2019-16576 · C520V21 · C520V21

Published 2019-11-18 · Updated 2020-08-24 · CVE-2019-3424

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions C520V21 smart camera devices versions V2.1.14 and below

Description The issue is related to authentication, allowing an attacker to automatically obtain access to web services from the authorized browser of the same computer and perform operations.

Recommendations For versions V2.1.14 and below, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2019-3424

Affected Products

C520V21

References · 3

• http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011842 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-3424 · Security Note
• https://osv.dev/vulnerability/CVE-2019-3424 · Vendor Advisory