Unauthorized Access Control Vulnerability in Uniview IP Camera

9.1 CVSS

Vulnerability Description

The vulnerability exists in Uniview IP Camera due to identification and authentication failure at its web-based management interface. A remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful exploitation of this vulnerability could allow the attacker to gain complete control of the targeted device.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-0773

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

This vulnerability is reported by Souvik Kandar and Arko Dhar from Redinent Innovations Engineering & Research Team, Karnataka, India.

References

More from Uniview

View All →

CVE-2024-3850

Uniview NVR301-04S2-P4 Cross-site Scripting

Medium 4.8

CVE-2024-0778

Uniview ISC 2500-S VM.php setNatConfig os command injection

High 8

Affected Vendor

Uniview

View all reports →

Affected Software

Uniview IP Camera IPC322LB-SF28-A

Vulnerable Versions:

CIPC-B2303.X.X.XXXXXX, DIPC-B1213.X.X.XXXXXX, DIPC-B1216.X.X.XXXXXX, DIPC-B1221.X.X.XXXXXX, DIPC-B1222.X.X.XXXXXX, DIPC-B1225.X.X.XXXXXX, DIPC-B1226.X.X.XXXXXX, DIPC-B1219.X.X.XXXXXX, DIPC-B1223.X.X.XXXXXX, DIPC-B1228.X.X.XXXXXX, DIPC-B1229.X.X.XXXXXX