CVE-2021-4468

Name of the Vulnerable Software and Affected Versions PLANEX CS-QP50F-ING2 smart cameras (affected versions not specified)

Description The PLANEX CS-QP50F-ING2 smart cameras have a configuration backup interface accessible over HTTP without authentication. An unauthenticated remote attacker can retrieve a compressed configuration backup file directly from the device. This backup file contains sensitive configuration information, including credentials, potentially granting the attacker administrative access to the camera and compromising the monitored environment.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.