PT-2026-52991 · H.View · Hv-500S6 Ip Camera
CVSS v3.1
7.2
High
| Vector | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
H.View HV-500S6 IP Camera (affected versions not specified)
Description
Certificate-related upload interfaces allow authenticated users to store arbitrary file content in fixed, persistent filesystem locations. The system fails to validate the file type, structure, or size, allowing the placement of malformed data in locations reserved for trusted certificate material. This can compromise system integrity and affect behavior even after a reboot.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Unrestricted File Upload
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Hv-500S6 Ip Camera