Search criteria

2 vulnerabilities found for Wanscam HW0021 by Wanscam

CVE-2017-11510 (GCVE-0-2017-11510)

Vulnerability from nvd – Published: 2018-03-28 17:00 – Updated: 2024-09-17 02:06
VLAI
Summary
An information leak exists in Wanscam's HW0021 network camera that allows an unauthenticated remote attacker to recover the administrator username and password via an ONVIF GetSnapshotUri request.
Severity
No CVSS data available.
CWE
Assigner
References
Impacted products
Vendor Product Version
Wanscam Wanscam HW0021 Affected: 11.6.5.1.1-20161213
Create a notification for this product.
Date Public
2017-11-10 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T18:12:40.248Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/research/tra-2017-33"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Wanscam HW0021",
          "vendor": "Wanscam",
          "versions": [
            {
              "status": "affected",
              "version": "11.6.5.1.1-20161213"
            }
          ]
        }
      ],
      "datePublic": "2017-11-10T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An information leak exists in Wanscam\u0027s HW0021 network camera that allows an unauthenticated remote attacker to recover the administrator username and password via an ONVIF GetSnapshotUri request."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200 - Information exposure",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-28T16:57:01.000Z",
        "orgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be",
        "shortName": "tenable"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.tenable.com/security/research/tra-2017-33"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vulnreport@tenable.com",
          "DATE_PUBLIC": "2017-11-10T00:00:00",
          "ID": "CVE-2017-11510",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Wanscam HW0021",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "11.6.5.1.1-20161213"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Wanscam"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An information leak exists in Wanscam\u0027s HW0021 network camera that allows an unauthenticated remote attacker to recover the administrator username and password via an ONVIF GetSnapshotUri request."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-200 - Information exposure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.tenable.com/security/research/tra-2017-33",
              "refsource": "MISC",
              "url": "https://www.tenable.com/security/research/tra-2017-33"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be",
    "assignerShortName": "tenable",
    "cveId": "CVE-2017-11510",
    "datePublished": "2018-03-28T17:00:00.000Z",
    "dateReserved": "2017-07-21T00:00:00.000Z",
    "dateUpdated": "2024-09-17T02:06:57.782Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-11510 (GCVE-0-2017-11510)

Vulnerability from cvelistv5 – Published: 2018-03-28 17:00 – Updated: 2024-09-17 02:06
VLAI
Summary
An information leak exists in Wanscam's HW0021 network camera that allows an unauthenticated remote attacker to recover the administrator username and password via an ONVIF GetSnapshotUri request.
Severity
No CVSS data available.
CWE
Assigner
References
Impacted products
Vendor Product Version
Wanscam Wanscam HW0021 Affected: 11.6.5.1.1-20161213
Create a notification for this product.
Date Public
2017-11-10 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T18:12:40.248Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/research/tra-2017-33"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Wanscam HW0021",
          "vendor": "Wanscam",
          "versions": [
            {
              "status": "affected",
              "version": "11.6.5.1.1-20161213"
            }
          ]
        }
      ],
      "datePublic": "2017-11-10T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An information leak exists in Wanscam\u0027s HW0021 network camera that allows an unauthenticated remote attacker to recover the administrator username and password via an ONVIF GetSnapshotUri request."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200 - Information exposure",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-28T16:57:01.000Z",
        "orgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be",
        "shortName": "tenable"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.tenable.com/security/research/tra-2017-33"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vulnreport@tenable.com",
          "DATE_PUBLIC": "2017-11-10T00:00:00",
          "ID": "CVE-2017-11510",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Wanscam HW0021",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "11.6.5.1.1-20161213"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Wanscam"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An information leak exists in Wanscam\u0027s HW0021 network camera that allows an unauthenticated remote attacker to recover the administrator username and password via an ONVIF GetSnapshotUri request."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-200 - Information exposure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.tenable.com/security/research/tra-2017-33",
              "refsource": "MISC",
              "url": "https://www.tenable.com/security/research/tra-2017-33"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be",
    "assignerShortName": "tenable",
    "cveId": "CVE-2017-11510",
    "datePublished": "2018-03-28T17:00:00.000Z",
    "dateReserved": "2017-07-21T00:00:00.000Z",
    "dateUpdated": "2024-09-17T02:06:57.782Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}