CVE-2023-0773: Uniview IP Camera IPC322LB-SF28-A, заобикаляне на вход

Описание

Оригинално описание

The vulnerability exists in Uniview IP Camera due to identification and authentication failure at its web-based management interface. A remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful exploitation of this vulnerability could allow the attacker to gain complete control of the targeted device.

Засегнати продукти

• Uniview Uniview IP Camera IPC322LB-SF28-A: CIPC-B2303.X.X.XXXXXX до CIPC-B2303.2.8.230105; DIPC-B1213.X.X.XXXXXX до DIPC-B1213.6.5.230215; DIPC-B1216.X.X.XXXXXX до DIPC-B1216.5.7.230109; DIPC-B1221.X.X.XXXXXX до DIPC-B1221.3.5.221202; DIPC-B1222.X.X.XXXXXX до DIPC-B1222.3.8.230223; DIPC-B1225.X.X.XXXXXX до DIPC-B1225.3.3.221123; DIPC-B1226.X.X.XXXXXX до DIPC-B1226.3.6.230105; DIPC-B1219.X.X.XXXXXX до DIPC-B1219.2.67.221019; DIPC-B1223.X.X.XXXXXX до DIPC-B1223.3.3.221123; DIPC-B1228.X.X.XXXXXX до DIPC-B1228.2.65.230207; DIPC-B1229.X.X.XXXXXX до DIPC-B1229.1.67.230104
• uniview ip_camera_ipc322lb-sf28-a: CIPC-B2303.X.X.XXXXXX до CIPC-B2303.2.8.230105; DIPC-B1213.X.X.XXXXXX до DIPC-B1213.6.5.230215; DIPC-B1216.X.X.XXXXXX до DIPC-B1216.5.7.230109; DIPC-B1221.X.X.XXXXXX до DIPC-B1221.3.5.221202; DIPC-B1222.X.X.XXXXXX до DIPC-B1222.3.8.230223; DIPC-B1225.X.X.XXXXXX до DIPC-B1225.3.3.221123; DIPC-B1226.X.X.XXXXXX до DIPC-B1226.3.6.230105; DIPC-B1219.X.X.XXXXXX до DIPC-B1219.2.67.221019 affected; DIPC-B1223.X.X.XXXXXX до DIPC-B1223.3.3.221123; DIPC-B1228.X.X.XXXXXX до DIPC-B1228.2.65.230207; DIPC-B1229.X.X.XXXXXX до DIPC-B1229.1.67.230104

Вид слабост

• CWE-287 Неправилна автентикация

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2023-0773
• https://nvd.nist.gov/vuln/detail/CVE-2023-0773
• https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0270
• https://global.uniview.com/About_Us/Security/Notice/202309/976482_140493_0.htm