Lucene search

[email protected]NVD:CVE-2020-23512

HistorySep 15, 2020 - 2:15 p.m.

CVE-2020-23512

2020-09-1514:15:14

CWE-306

[email protected]

web.nvd.nist.gov

vr cam

access control

vulnerability

remote

authentication

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.006

Percentile

79.6%

JSON

VR CAM P1 Model P1 v1 has an incorrect access control vulnerability where an attacker can obtain complete access of the device from web (remote) without authentication.

Affected configurations

Nvd

Node

vr_camp1_firmwareMatch-

AND

vr_camp1Match-

VendorProductVersionCPE
vr_camp1_firmware-cpe:2.3:o:vr_cam:p1_firmware:-:*:*:*:*:*:*:*
vr_camp1-cpe:2.3:h:vr_cam:p1:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
vr_cam	p1_firmware	-	cpe:2.3:o:vr_cam:p1_firmware:-:::::::*
vr_cam	p1	-	cpe:2.3:h:vr_cam:p1:-:::::::*

References

www.iotpentest.com/2020/05/vr-360-camera-general-wlak.html

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.006

Percentile

79.6%

JSON

Related for NVD:CVE-2020-23512

cvelist1 prion1 cve1