CVEvulnerability
CVE-2020-23512
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2020-09-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-306
Description
VR CAM P1 Model P1 v1 has an incorrect access control vulnerability where an attacker can obtain complete access of the device from web (remote) without authentication.
Affected configurations
• vr cam p1 firmware
Related
Weakness · CWE (1)
- CWE-306 Missing Authentication for Critical Functionality weakness
References
- https://www.iotpentest.com/2020/05/vr-360-camera-general-wlak.html Exploit, Third Party Advisory
- https://www.iotpentest.com/2020/05/vr-360-camera-general-wlak.html Exploit, Third Party Advisory