high8.2
CVE-2022-30620
On Cellinx Camera with guest enabled, attacker with web access can elevate privileges to administrative: "1" to "0" privileges by changing the following cookie…
Impact
On Cellinx Camera with guest enabled, attacker with web access can elevate privileges to administrative: "1" to "0" privileges by changing the following cookie values from "is_admin", "showConfig". Administrative Privileges which allows changing various configuration in the camera.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cellinx | Cellinx Nvt - Ip Ptz Camera Firmware | Versions 3.2.0, 3.2.1 |