CVE-2022-38970 – ieGeek IG20 hipcam RealServer V1.0 is vulnerable to Incorrect Access Control. The algorith …

Vuln ID: CVE-2022-38970

Published:  2022-09-26  11:15:09Z

Description: ieGeek IG20 hipcam RealServer V1.0 is vulnerable to Incorrect Access Control. The algorithm used to generate device IDs (UIDs) for devices that utilize Shenzhen Yunni Technology iLnkP2P suffers from a predictability flaw that allows remote attackers to establish direct connections to arbitrary devices.

Source: NVD.NIST.GOV

 


Date:

Categorie(s):

Tag(s):