Fernando Miranda

Name of the Vulnerable Software and Affected Versions: FOSCAM IP Camera FI8620 (affected versions not specified) Description: An issue exists due to insufficient access restrictions in the `/tmpfs/` and `/log/` directories, which could let a malicious user obtain sensitive information. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Zavio IP Cameras versions 1.6.03 and earlier Description: An Authentication Bypass issue exists in the web interface of Zavio IP Cameras due to a hardcoded admin account found in boa.conf. This allows a remote malicious user to obtain sensitive information. Recommendations: For versions 1.6.03 and earlier, consider disabling the web interface until a patch is available to prevent exploitation of the hardcoded admin account. Restrict access to the boa.conf file to minimize the risk of sensitive information disclosure. Avoid using the default admin account in the affected Zavio IP Cameras until the issue is resolved.

The issue concerns a remote authentication bypass in Vivotek IP Cameras, which could allow unauthorized access to the video stream.

The issue allows remote attackers to obtain passwords via a brute-force attack that relies on timing differences in responses to incorrect password guesses, also known as a timing side-channel attack. This occurs because the `passwordCheck` function terminates validation of a Route Permission Table entry password upon encountering the first incorrect character.

The issue allows remote attackers to execute arbitrary code via a long `idCount` value in an `ICONDIR` structure in an ICO file. This is a stack-based buffer overflow.

The issue is related to a buffer overflow that can be triggered by a crafted AWD file, potentially allowing remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.

The issue is related to a buffer overflow in the ubnt-streamer RTSP service. This occurs when a long rtsp: URI is sent in a DESCRIBE request, allowing remote attackers to execute arbitrary code.