PT-2024-26445 · Anpviz · Ipc-D850+17

Published

2024-05-28

·

Updated

2024-08-28

·

CVE-2024-35344

CVSS v3.1

9.9

Critical

VectorAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Anpviz IPC-D250 versions 3.2.2.2 and lower Anpviz IPC-D260 versions 3.2.2.2 and lower Anpviz IPC-B850 versions 3.2.2.2 and lower Anpviz IPC-D850 versions 3.2.2.2 and lower Anpviz IPC-D350 versions 3.2.2.2 and lower Anpviz IPC-D3150 versions 3.2.2.2 and lower Anpviz IPC-D4250 versions 3.2.2.2 and lower Anpviz IPC-D380 versions 3.2.2.2 and lower Anpviz IPC-D880 versions 3.2.2.2 and lower Anpviz IPC-D280 versions 3.2.2.2 and lower Anpviz IPC-D3180 versions 3.2.2.2 and lower Anpviz MC800N versions 3.2.2.2 and lower Anpviz YM500L versions 3.2.2.2 and lower Anpviz YM800N N2 versions 3.2.2.2 and lower Anpviz YMF50B versions 3.2.2.2 and lower Anpviz YM800SV2 versions 3.2.2.2 and lower Anpviz YM500L8 versions 3.2.2.2 and lower Anpviz YM200E10 versions 3.2.2.2 and lower
Description Certain Anpviz products contain a hardcoded cryptographic key stored in the firmware of the device. This issue affects various models of IP cameras.
Recommendations For Anpviz IPC-D250 version 3.2.2.2 and lower, update the firmware to a version higher than 3.2.2.2. For Anpviz IPC-D260 version 3.2.2.2 and lower, update the firmware to a version higher than 3.2.2.2. For Anpviz IPC-B850 version 3.2.2.2 and lower, update the firmware to a version higher than 3.2.2.2. For Anpviz IPC-D850 version 3.2.2.2 and lower, update the firmware to a version higher than 3.2.2.2. For Anpviz IPC-D350 version 3.2.2.2 and lower, update the firmware to a version higher than 3.2.2.2. For Anpviz IPC-D3150 version 3.2.2.2 and lower, update the firmware to a version higher than 3.2.2.2. For Anpviz IPC-D4250 version 3.2.2.2 and lower, update the firmware to a version higher than 3.2.2.2. For Anpviz IPC-D380 version 3.2.2.2 and lower, update the firmware to a version higher than 3.2.2.2. For Anpviz IPC-D880 version 3.2.2.2 and lower, update the firmware to a version higher than 3.2.2.2. For Anpviz IPC-D280 version 3.2.2.2 and lower, update the firmware to a version higher than 3.2.2.2. For Anpviz IPC-D3180 version 3.2.2.2 and lower, update the firmware to a version higher than 3.2.2.2. For Anpviz MC800N version 3.2.2.2 and lower, update the firmware to a version higher than 3.2.2.2. For Anpviz YM500L version 3.2.2.2 and lower, update the firmware to a version higher than 3.2.2.2. For Anpviz YM800N N2 version 3.2.2.2 and lower, update the firmware to a version higher than 3.2.2.2. For Anpviz YMF50B version 3.2.2.2 and lower, update the firmware to a version higher than 3.2.2.2. For Anpviz YM800SV2 version 3.2.2.2 and lower, update the firmware to a version higher than 3.2.2.2. For Anpviz YM500L8 version 3.2.2.2 and lower, update the firmware to a version higher than 3.2.2.2. For Anpviz YM200E10 version 3.2.2.2 and lower, update the firmware to a version higher than 3.2.2.2.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-321

Related Identifiers

CVE-2024-35344

Affected Products

Ipc-B850
Ipc-D250
Ipc-D260
Ipc-D280
Ipc-D3150
Ipc-D3180
Ipc-D350
Ipc-D380
Ipc-D4250
Ipc-D850
Ipc-D880
Mc800N
Ym200E10
Ym500L
Ym500L8
Ym800N N2
Ym800Sv2
Ymf50B