CVE-2023-0773CWE-287

Unauthorized Access Control Vulnerability in Uniview IP Camera

Critical · published September 19, 2023

CVSS v3.1
9.1
EPSS
1%
Percentile
69.2
In the wild
Unconfirmed
What it is

🚨 A simple HTTP request is all it takes for an attacker to seize control of Uniview IP Cameras! 🔥 Think of it like leaving your front door wide open for anyone to stroll in, while you think your security system is still doing its job. This vulnerability means attackers can waltz into your camera settings without breaking a sweat! If exploited, a remote attacker could gain total control over your camera, opening the door to unauthorized surveillance, data theft, or even turning the camera into part of a larger botnet. With such power, they could spy on your premises or misuse the device in ways you cannot even imagine!

Put simply

Think of it like leaving your front door wide open for anyone to stroll in, while you think your security system is still doing its job. This vulnerability means attackers can waltz into your camera settings without breaking a sweat! This vulnerability arises from a failure in identification and authentication at the web management interface, allowing attackers to send crafted HTTP requests that bypass security measures.

What to do

If exploited, a remote attacker could gain total control over your camera, opening the door to unauthorized surveillance, data theft, or even turning the camera into part of a larger botnet. With such power, they could spy on your premises or misuse the device in ways you cannot even imagine! Immediately patch your Uniview IP Cameras to the latest firmware version to close this vulnerability. Ensure that you change any default credentials and review access controls to limit exposure. Regularly check for firmware updates and security advisories. You've got this! With a little diligence, you can lock down your security cameras and keep your environment safe. 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01251 · 69.2th percentile
Weakness
CWE-287 · Improper Authentication
Published
2023-09-19T09:33Z
EPSS history
Timeline
  • 19 SEP 09:33Z
    Unauthorized Access Control Vulnerability in Uniview IP Camera
    cvelistv5