Design/Logic Flaw

2021-03-3003:15:00

PRIOn knowledge base

www.prio-n.com

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.1%

JSON

An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. Authenticated attackers with the “Operator” Privilege can gain admin privileges via a crafted request to ‘/goform/formUserMng’.

CPENameOperatorVersion
wifi_mini_spy_1080p_hd_security_ip_camera_firmwareeq1.9.798

CPE	Name	Operator	Version
	wifi_mini_spy_1080p_hd_security_ip_camera_firmware	eq	1.9.798

References

xn--sb-lka.org/cve/INSMA.txt