critical9.1
CVE-2023-0773
The vulnerability exists in Uniview IP Camera due to identification and authentication failure at its web-based management interface.
Impact
The vulnerability exists in Uniview IP Camera due to identification and authentication failure at its web-based management interface. A remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful exploitation of this vulnerability could allow the attacker to gain complete control of the targeted device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Uniview | Ipc322lb-Sf28-A Firmware | through cipc-b2303.2.8.230105 through dipc-b1213.6.5.230215 through dipc-b1216.5.7.230109 through dipc-b1221.3.5.221202 through dipc-b1222.3.8.230223 through dipc-b1225.3.3.221123 |
Weakness classification
References
- NVD record
- CVE.org record
- https://global.uniview.com/About_Us/Security/Notice/202309/976482_140493_0.htm
- https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0270
- https://global.uniview.com/About_Us/Security/Notice/202309/976482_140493_0.htm
- https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0270