critical9.8
CVE-2019-12289
An issue was discovered in upgrade_firmware.cgi on VStarcam 100T (C7824WIP) CH-sys-48.53.75.119~123 and 200V (C38S) CH-sys-48.53.203.119~123 devices.
Impact
An issue was discovered in upgrade_firmware.cgi on VStarcam 100T (C7824WIP) CH-sys-48.53.75.119~123 and 200V (C38S) CH-sys-48.53.203.119~123 devices. A remote command can be executed through a system firmware update without authentication. The attacker can modify the files within the internal firmware or even steal account information by executing a command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vstracam | C7824wip Firmware | Version ch-sys-48.53.75.119\~123 |
| Vstracam | C38s Firmware | Version ch-sys-48.53.203.119\~123 |