{
  "affected_products": {
    "_id": null,
    "data": [
      {
        "_id": null,
        "model": "ics1033",
        "scope": null,
        "trust": 0.6,
        "vendor": "ipux",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2011-2373"
      }
    ]
  },
  "credits": {
    "_id": null,
    "data": "Secunia",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "102385"
      }
    ],
    "trust": 0.1
  },
  "description": {
    "_id": null,
    "data": "iPUX ICS1033 is a webcam product. iPUX ICS1033 has an unauthorized access vulnerability in its implementation, which can be exploited by local attackers to bypass certain security restrictions. This vulnerability stems from the fact that the application includes an undisclosed \\\"productmaker\\\" account in the default credentials. ----------------------------------------------------------------------\n\n\nJoin Secunia @ FIRST Conference, 12-17 June, Hilton Vienna, Austria\nSee to the presentation \"The Dynamics and Threats of End-Point Software Portfolios\" by Secunia\u0027s Research Analyst Director, Stefan Frei. \nRead more:\nhttp://conference.first.org/ \n\n\n----------------------------------------------------------------------\n\nTITLE:\niPUX ICS1033 Undocumented Account Security Issue\n\nSECUNIA ADVISORY ID:\nSA44925\n\nVERIFY ADVISORY:\nSecunia.com\nhttp://secunia.com/advisories/44925/\nCustomer Area (Credentials Required)\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=44925\n\nRELEASE DATE:\n2011-06-17\n\nDISCUSS ADVISORY:\nhttp://secunia.com/advisories/44925/#comments\n\nAVAILABLE ON SITE AND IN CUSTOMER AREA:\n * Last Update\n * Popularity\n * Comments\n * Criticality Level\n * Impact\n * Where\n * Solution Status\n * Operating System / Software\n * CVE Reference(s)\n\nhttp://secunia.com/advisories/44925/\n\nONLY AVAILABLE IN CUSTOMER AREA:\n * Authentication Level\n * Report Reliability\n * Secunia PoC\n * Secunia Analysis\n * Systems Affected\n * Approve Distribution\n * Remediation Status\n * Secunia CVSS Score\n * CVSS\n\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=44925\n\nONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI:\n * AUTOMATED SCANNING\n\nhttp://secunia.com/vulnerability_scanning/personal/\nhttp://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/\n\nDESCRIPTION:\nA security issue has been reported in iPUX ICS1033, which can be\nexploited by malicious people to bypass certain security\nrestrictions. This\ncan be exploited to gain access to the web and Telnet interfaces and\ne.g. conduct command injection attacks. \n\nSOLUTION:\nRestrict access to trusted hosts only. \n\nPROVIDED AND/OR DISCOVERED BY:\nRoberto Paleari\n\nORIGINAL ADVISORY:\nhttp://archives.neohapsis.com/archives/bugtraq/2011-06/0064.html\n\nOTHER REFERENCES:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nDEEP LINKS:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXTENDED DESCRIPTION:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXTENDED SOLUTION:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXPLOIT:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\nprivate users keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/advisories/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/advisories/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2011-2373"
      },
      {
        "db": "PACKETSTORM",
        "id": "102385"
      }
    ],
    "trust": 0.63
  },
  "external_ids": {
    "_id": null,
    "data": [
      {
        "db": "SECUNIA",
        "id": "44925",
        "trust": 0.7
      },
      {
        "db": "CNVD",
        "id": "CNVD-2011-2373",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "102385",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2011-2373"
      },
      {
        "db": "PACKETSTORM",
        "id": "102385"
      }
    ]
  },
  "id": "VAR-201106-0318",
  "iot": {
    "_id": null,
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2011-2373"
      }
    ],
    "trust": 1.35
  },
  "iot_taxonomy": {
    "_id": null,
    "data": [
      {
        "category": [
          "Network device"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2011-2373"
      }
    ]
  },
  "last_update_date": "2022-05-17T01:48:40.064000Z",
  "references": {
    "_id": null,
    "data": [
      {
        "trust": 0.7,
        "url": "http://secunia.com/advisories/44925/"
      },
      {
        "trust": 0.1,
        "url": "https://ca.secunia.com/?page=viewadvisory\u0026vuln_id=44925"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/vulnerability_intelligence/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/secunia_security_advisories/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/44925/#comments"
      },
      {
        "trust": 0.1,
        "url": "http://conference.first.org/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/"
      },
      {
        "trust": 0.1,
        "url": "http://archives.neohapsis.com/archives/bugtraq/2011-06/0064.html"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/vulnerability_scanning/personal/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/about_secunia_advisories/"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2011-2373"
      },
      {
        "db": "PACKETSTORM",
        "id": "102385"
      }
    ]
  },
  "sources": {
    "_id": null,
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2011-2373",
        "ident": null
      },
      {
        "db": "PACKETSTORM",
        "id": "102385",
        "ident": null
      }
    ]
  },
  "sources_release_date": {
    "_id": null,
    "data": [
      {
        "date": "2011-06-22T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2011-2373",
        "ident": null
      },
      {
        "date": "2011-06-17T05:36:25",
        "db": "PACKETSTORM",
        "id": "102385",
        "ident": null
      }
    ]
  },
  "sources_update_date": {
    "_id": null,
    "data": [
      {
        "date": "2011-06-22T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2011-2373",
        "ident": null
      }
    ]
  },
  "title": {
    "_id": null,
    "data": "iPUX ICS1033 Override Access Vulnerability",
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2011-2373"
      }
    ],
    "trust": 0.6
  }
}