CVE-2024-47789

Name of the Vulnerable Software and Affected Versions D3D Security IP Camera (affected versions not specified)

Description The issue is related to the transmission of critical information in plain text, allowing a remote attacker to obtain user credentials by crafting a special HTTP packet. This is due to a weak authentication scheme in the HTTP header protocol, where the authorization tag contains a Base-64 encoded username and password. The vulnerability can be exploited by a remote attacker, leading to the exposure of user credentials of the targeted device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.