PT-2023-8872 · Uniview · Uniview Ip Camera

Arko Dhar + 1 · Published 2023-09-19 · Updated 2024-03-27 · CVE-2023-0773

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Uniview IP Camera (affected versions not specified)

Description The issue is related to identification and authentication failure at the web-based management interface of Uniview IP Camera. A remote attacker could exploit this by sending specially crafted HTTP requests to the vulnerable device, potentially gaining complete control of the targeted device. The vulnerability allows remote attackers to bypass the authentication process and gain unauthorized access by sending specially crafted packets.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2024-02512

CVE-2023-0773

Affected Products

Uniview Ip Camera

References · 14

• https://nvd.nist.gov/vuln/detail/CVE-2023-0773 · Security Note
• https://global.uniview.com/About_Us/Security/Notice/202309/976482_140493_0.htm · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-0773 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-02512 · Security Note
• https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0270 · Note
• https://t.me/cibsecurity/70701 · Telegram Post
• https://twitter.com/vuldb/status/1704118535067468240 · Twitter Post
• https://twitter.com/CVEnew/status/1704067368287178991 · Twitter Post
• https://t.me/true_secator/5574 · Telegram Post
• https://twitter.com/DMFezzaReedCISA/status/1704364022735237166 · Twitter Post
• https://t.me/freedomf0x/21288 · Telegram Post
• https://twitter.com/cracbot/status/1704374871244063123 · Twitter Post
• https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0270 · Note
• https://twitter.com/VulmonFeeds/status/1704117267435249980 · Twitter Post