Vulnerability · Published Sep 19, 2023 · Assigned by CERT-In
CVE-2023-0773Unauthorized Access Control Vulnerability in Uniview IP Camera
Critical 9.1
In plain English
A critical-severity improper authentication in Uniview IP Camera IPC322LB-SF28-A from Uniview. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 69% of all known vulnerabilities).
Official description
The vulnerability exists in Uniview IP Camera due to identification and authentication failure at its web-based management interface. A remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful exploitation of this vulnerability could allow the attacker to gain complete control of the targeted device.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Uniview | Uniview IP Camera IPC322LB-SF28-A | CIPC-B2303.X.X.XXXXXX – through CIPC-B2303.2.8.230105DIPC-B1213.X.X.XXXXXX – through DIPC-B1213.6.5.230215DIPC-B1216.X.X.XXXXXX – through DIPC-B1216.5.7.230109DIPC-B1221.X.X.XXXXXX – through DIPC-B1221.3.5.221202DIPC-B1222.X.X.XXXXXX – through DIPC-B1222.3.8.230223DIPC-B1225.X.X.XXXXXX – through DIPC-B1225.3.3.221123DIPC-B1226.X.X.XXXXXX – through DIPC-B1226.3.6.230105DIPC-B1219.X.X.XXXXXX – through DIPC-B1219.2.67.221019 |
Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H