CVE-2019-25247

Name of the Vulnerable Software and Affected Versions Beward N100 H.264 VGA IP Camera version M2.1.6

Description The Beward N100 H.264 VGA IP Camera version M2.1.6 contains a cross-site request forgery issue. This allows attackers to perform administrative actions without proper validation of requests. Specifically, an attacker can create a malicious webpage with a hidden form to add an administrator user. A logged-in user tricked into submitting this form would inadvertently grant administrative access. The attack exploits a lack of request validation when adding a new administrator.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.