CVE-2022-38970

ieGeek IG20 hipcam RealServer V1.0 is vulnerable to Incorrect Access Control

Medium · published September 26, 2022

CVSS v3.1
6.5
EPSS
1%
Percentile
69.0
In the wild
Unconfirmed
What it is

ieGeek IG20 hipcam RealServer V1.0 is vulnerable to Incorrect Access Control. The algorithm used to generate device IDs (UIDs) for devices that utilize Shenzhen Yunni Technology iLnkP2P suffers from a predictability flaw that allows remote attackers to establish direct connections to arbitrary devices.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01244 · 69.0th percentile
Published
2022-09-26T10:21Z
EPSS history
Timeline
  • 26 SEP 10:21Z
    ieGeek IG20 hipcam RealServer V1.0 is vulnerable to Incorrect Access Control
    cvelistv5