Vendors / Barni Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 1
Exploited now Barni records in CISA KEV No Barni vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 75
MASTER IPCAMERA01 3.3.4.2103 devices allow Remote Command Execution, related to the thttpd component.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.55721 · Published 2019-05-08 · No fix listed
Priority MEDIUM 61
MASTER IPCAMERA01 3.3.4.2103 devices allow remote attackers to obtain sensitive information via a crafted HTTP request, as demonstrated by the username, password, and configuration settings.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.19804 · Published 2018-01-16 · No fix listed CWE-200
Priority MEDIUM 56
MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Download and Upload, as demonstrated by restore.cgi.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.11538 · Published 2018-01-16 · No fix listed CWE-434
Priority MEDIUM 54
MASTER IPCAMERA01 3.3.4.2103 devices have a hardcoded password of cat1029 for the root account.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.09732 · Published 2018-01-16 · No fix listed CWE-798
Priority MEDIUM 40
MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Change, as demonstrated by the port number of the web server.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.04628 · Published 2018-01-16 · No fix listed CWE-798
Open these records in search → All records by CVSS severity
4 1 0 0 0
THREATIST.IORead the docs