Vendors / Guardzilla Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 2
Exploited now Guardzilla records in CISA KEV No Guardzilla vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 52
The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access and monitoring.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01431 · Published 2018-12-31 · No fix listed CWE-330
Priority MEDIUM 46
A reliance on a static, hard-coded credential in the design of the cloud-based storage system of Practecol's Guardzilla All-In-One Video Security System allows an attacker to view the private data of all users of the Gua…
CVSS 3.0 CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.0162 · Published 2019-01-31 · No fix listed CWE-798
Priority MEDIUM 41
The remote upgrade feature in Guardzilla GZ180 devices allow command injection via a crafted new firmware version parameter.
CVSS 3.1 HIGH 8.1· Network · No auth · No interaction · EPSS 0.01629 · Published 2018-12-31 · No fix listed CWE-78
Priority MEDIUM 40
The TK_set_deviceModel_req_handle function in the cloud communication component in Guardzilla GZ621W devices with firmware 0.5.1.4 has a Buffer Overflow.
CVSS 3.1 HIGH 8.1· Network · No auth · No interaction · EPSS 0.01154 · Published 2018-12-31 · No fix listed CWE-119
Open these records in search → All records by CVSS severity
2 2 0 0 0
THREATIST.IORead the docs