CVE-2012-6451

Lorex LNC116 and LNC104 IP Cameras have a Remote Authentication Bypass Vulnerability

published January 24, 2020

CVSS
—
EPSS
3%
Percentile
85.2
In the wild
Unconfirmed
What it is

🚨 A sneaky remote authentication bypass lurks in Lorex LNC116 and LNC104 IP Cameras! Anyone can access these devices without logging in, as if a hotel room’s door is wide open! 🔥 Picture this: a hotel with a front door that opens to anyone walking by, allowing unwanted visitors to waltz right into any room — that’s what this vulnerability does to your cameras! An attacker could easily gain unauthorized access to your camera feeds, effectively turning your privacy into a public spectacle. Imagine them watching your home, accessing sensitive footage, or even tampering with the settings — absolutely devastating!

Put simply

Picture this: a hotel with a front door that opens to anyone walking by, allowing unwanted visitors to waltz right into any room — that’s what this vulnerability does to your cameras! This vulnerability allows an unauthorized user to bypass authentication on Lorex LNC116 and LNC104 IP Cameras, essentially letting anyone view the camera feed without any valid credentials.

What to do

An attacker could easily gain unauthorized access to your camera feeds, effectively turning your privacy into a public spectacle. Imagine them watching your home, accessing sensitive footage, or even tampering with the settings — absolutely devastating! Check your camera versions and ensure they are updated to the latest firmware. If you’re using these models, consider implementing network restrictions to limit access. Always change default passwords if you haven't already! You've got this! Following these steps can help secure your cameras and keep your space safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02609 · 85.2th percentile
Published
2020-01-24T14:31Z
EPSS history
Timeline
  • 24 JAN 14:31Z
    Lorex LNC116 and LNC104 IP Cameras have a Remote Authentication Bypass Vulnerability
    cvelistv5