header-logo
Suggest Exploit
vendor:
IP Camera
by:
icekam,xiao13,Rainbow,tfsec
7,5
CVSS
HIGH
Unauthorized Access
287
CWE
Product Name: IP Camera
Affected Version From: Compro IP70 2.08_7130218
Affected Version To: IP60, TN540
Patch Exists: YES
Related CWE: CVE-2021-40382
CPE: h:compro_technology:ip_camera
Metasploit: N/A
Other Scripts: https://www.infosecmatter.com/nessus-plugin-library/?id=40382, https://www.infosecmatter.com/nessus-plugin-library/?id=62383, https://www.infosecmatter.com/nessus-plugin-library/?id=35188, https://www.infosecmatter.com/nessus-plugin-library/?id=34380, https://www.infosecmatter.com/nessus-plugin-library/?id=41221, https://www.infosecmatter.com/nessus-plugin-library/?id=137354, https://www.infosecmatter.com/nessus-plugin-library/?id=35347, https://www.infosecmatter.com/nessus-plugin-library/?id=33865, https://www.infosecmatter.com/nessus-plugin-library/?id=37068, https://www.infosecmatter.com/nessus-plugin-library/?id=72834
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: None
2021

Compro Technology IP Camera – ‘ mjpegStreamer.cgi’ Screenshot Disclosure

There is an unauthorized access vulnerability, which can lead to unauthorized access to camera video screenshots. Payload: /mjpegStreamer.cgi

Mitigation:

Ensure that access to the camera is restricted to authorized users only and that all users have strong passwords.
Source

Exploit-DB raw data:

# Exploit Title: Compro Technology IP Camera - ' mjpegStreamer.cgi' Screenshot Disclosure
# Date: 2021-09-30
# Exploit Author: icekam,xiao13,Rainbow,tfsec
# Software Link: http://www.comprotech.com.hk/
# Version: Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, TN540
# CVE : CVE-2021-40382

There is an unauthorized access vulnerability, which can lead to
unauthorized access to camera video screenshots.

Payload:

/mjpegStreamer.cgi

please refer to:
https://github.com/icekam/0day/blob/main/Compro-Technology-Camera-has-multiple-vulnerabilities.md

Navigation

Suggest Exploit

Services By CQR