Vulnerabilities

TI-2023-22050 CVE-2023-41612 · GHSA-jpqh-5rm6-j8j7

Victure PC420 1.1.39 was discovered to use a weak encryption key for the file enabled_telnet.dat on the Micro SD card.

LOW 39

Victure PC420 1.1.39 was discovered to use a weak encryption key for the file enabled_telnet.dat on the Micro SD card.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00164 Published 2024-09-18 No fix listed CWE-798

TI-2023-22049 CVE-2023-41611 · GHSA-2p9x-h657-5mg3

Victure PC420 1.1.39 was discovered to use a weak and partially hardcoded key to encrypt data.

LOW 29

Victure PC420 1.1.39 was discovered to use a weak and partially hardcoded key to encrypt data.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0035 Published 2024-09-18 No fix listed CWE-798

TI-2023-22048 CVE-2023-41610 · GHSA-9387-xrfr-3wfr

Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext.

MEDIUM 40

Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00398 Published 2024-09-18 No fix listed CWE-256

TI-2020-12401 CVE-2020-15744 · GHSA-fjp8-599f-3qpx

Stack-based buffer overflow leading to RCE in Victure Camera

MEDIUM 45

Stack-based Buffer Overflow vulnerability in the ONVIF server component of Victure PC420 smart camera allows an attacker to execute remote code on the target device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01412 Published 2021-08-30 No fix listed CWE-121

Vulnerabilities

Filters

Victure PC420 1.1.39 was discovered to use a weak encryption key for the file enabled_telnet.dat on the Micro SD card.

Victure PC420 1.1.39 was discovered to use a weak and partially hardcoded key to encrypt data.

Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext.

Stack-based buffer overflow leading to RCE in Victure Camera