juliourena/APEMAN-Camera-PoCs

juliourena/APEMAN-Camera-PoCs

Releases0
This repository the vulnerabilities I found on an IoT device

CVE History

CVEPublishedCVSS v3CVSS v2
5.3 MEDIUM5 MEDIUM

A vulnerability was found in Apeman ID71 218.53.203.117. The impacted element is an unknown function of the file /onvif/device_service of the component ONVIF Service. Performing manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

3.5 LOW4 MEDIUM

A vulnerability has been found in Apeman ID71 EN75.8.53.20. The affected element is an unknown function of the file /set_alias.cgi. Such manipulation of the argument alias leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.