high7.5
CVE-2021-31793
An issue exists on NightOwl WDB-20-V2 WDB-20-V2_20190314 devices that allows an unauthenticated user to gain access to snapshots and video streams from the doo…
Impact
An issue exists on NightOwl WDB-20-V2 WDB-20-V2_20190314 devices that allows an unauthenticated user to gain access to snapshots and video streams from the doorbell. The binary app offers a web server on port 80 that allows an unauthenticated user to take a snapshot from the doorbell camera via the /snapshot URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nightowlsp | Wdb-20 Firmware | Version 20190314 |