Main Vulnerability Database Vulnerabilities #VU50904

Information disclosure in Moonware Studios products - #VU50904

Published: February 24, 2021

Vulnerability identifier: #VU50904

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: N/A

CWE-ID: CWE-200

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to some baby monitors do not require authentication for unknown parties to connect. A remote attacker can gain unauthorized access to the camera's video stream.

Affected software

Boa Webserver
Hipcam RealServer
H.264 DVR
webcamXP

Remediation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

External References

https://www.safetydetectives.com/blog/babymonitor-exposed-report/

Related Security Bulletins