7.5
CVSSv3

CVE-2023-31594

Published: 25/05/2023 Updated: 01/06/2023
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via an exposed HTTP channel using VLC network.

Vulnerable Product Search on Vulmon Subscribe to Product

ic realtime_icip-p2012t_firmware 2.420

Github Repositories

IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control

CVE-2023-31594 IC Realtime ICIP-P2012T is vulnerable to Incorrect Access Control Unauthenticated Streaming Channel in IC Realtime IP PTZ Dome Camera ICIP-P2012 software version: 2420 The live feed (MJPEG) can be streamed via an exposed HTTP channel using VLC network stream This vulnerability critically affects confidentiality of customers and could be used in reconnaissance