TRENDnet TV-IP302PI 1.02.38 NTP field injects root commands
An authenticated NTP server-address reaches a shell-form system() call; the disclosure rates it 7.2 High.
Stories per day · 30 days
Relatedcisa1command-injection1enumeration1eseecloud1firmware1hard-coded-credentials1ics1iot1ntp1trendnet1
5 stories, newest first · one card per story
Stories tagged #ip-camera
Guangzhou Juan IoT Technology EseeCloud
Unpatched EseeCloud flaws, including hard-coded credentials, could let attackers take over IP cameras.
CareCam CM2507
CISA advisory: seven flaws in CareCam CM2507 IP cameras enable unauthenticated live video access, privileged ONVIF control, credential recovery, and code execution.
CareCam Pro IP Cameras
CISA advisory details hard-coded bootloader credential CVE-2026-85083 in ANJIA AJL33PC0801 CareCam Pro cameras, allowing physical-access firmware compromise.
3 Vulnerabilities Found on AvertX IP Cameras
Unit 42 disclosed three vulnerabilities (CVE-2020-11623/4/5) in AvertX HD838 and 438IR IP cameras; AvertX has released patches.