Vulnerabilities

TI-2018-04060 CVE-2018-5560 · GHSA-ppvp-wh9g-pg5w

Guardzilla All-In-One Video Security System Hard-Coded Credential

MEDIUM 46

A reliance on a static, hard-coded credential in the design of the cloud-based storage system of Practecol's Guardzilla All-In-One Video Security System allows an attacker to view the private data of all users of the Gua…

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.0162 Published 2019-01-31 No fix listed CWE-798

TI-2018-13155 CVE-2018-18602 · GHSA-hj52-cv6c-g64q

The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant…

MEDIUM 52

The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access and monitoring.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01431 Published 2018-12-31 No fix listed CWE-330

TI-2018-13154 CVE-2018-18601 · GHSA-rh5w-f4gw-ppw8

The TK_set_deviceModel_req_handle function in the cloud communication component in…

MEDIUM 40

The TK_set_deviceModel_req_handle function in the cloud communication component in Guardzilla GZ621W devices with firmware 0.5.1.4 has a Buffer Overflow.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01154 Published 2018-12-31 No fix listed CWE-119

TI-2018-13153 CVE-2018-18600 · GHSA-mcwm-rp7p-mm3c

The remote upgrade feature in Guardzilla GZ180 devices allow command injection via a…

MEDIUM 41

The remote upgrade feature in Guardzilla GZ180 devices allow command injection via a crafted new firmware version parameter.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01629 Published 2018-12-31 No fix listed CWE-78

Vulnerabilities

Filters

Guardzilla All-In-One Video Security System Hard-Coded Credential

The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant…

The TK_set_deviceModel_req_handle function in the cloud communication component in…

The remote upgrade feature in Guardzilla GZ180 devices allow command injection via a…