Vulnerabilities

TI-2018-14214 CVE-2018-20051 · GHSA-63wg-rrpw-6rxq

Mishandling of '>' on the Jooan JA-Q1H Wi-Fi camera with firmware 21.0.0.91 allows remote…

LOW 36

Mishandling of '>' on the Jooan JA-Q1H Wi-Fi camera with firmware 21.0.0.91 allows remote attackers to cause a denial of service (crash and reboot) via certain ONVIF methods such as CreateUsers, SetImagingSettings, GetSt…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01405 Published 2018-12-10 No fix listed CWE-20

TI-2018-14213 CVE-2018-20050 · GHSA-5mqh-4pq7-mjfx

Mishandling of an empty string on the Jooan JA-Q1H Wi-Fi camera with firmware 21.0.0.91…

LOW 36

Mishandling of an empty string on the Jooan JA-Q1H Wi-Fi camera with firmware 21.0.0.91 allows remote attackers to cause a denial of service (crash and reboot) via the ONVIF GetStreamUri method and GetVideoEncoderConfigu…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01495 Published 2018-12-10 No fix listed

TI-2017-12177 CVE-2017-16566 · GHSA-m7v9-w9c3-mw2g

On Jooan IP Camera A5 2.3.36 devices, an insecure FTP server does not require…

MEDIUM 47

On Jooan IP Camera A5 2.3.36 devices, an insecure FTP server does not require authentication, which allows remote attackers to read or replace core system files including those used for authentication (such as passwd and…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02562 Published 2017-11-17 No fix listed CWE-287

Vulnerabilities

Filters

Mishandling of '>' on the Jooan JA-Q1H Wi-Fi camera with firmware 21.0.0.91 allows remote…

Mishandling of an empty string on the Jooan JA-Q1H Wi-Fi camera with firmware 21.0.0.91…

On Jooan IP Camera A5 2.3.36 devices, an insecure FTP server does not require…