CVEvulnerability

CVE-2023-0773

9.8 CRITICAL Published 2023-09-19 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-09-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-287

Description

The vulnerability exists in Uniview IP Camera due to identification and authentication failure at its web-based management interface. A remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful exploitation of this vulnerability could allow the attacker to gain complete control of the targeted device.

Affected configurations

• uniview ipc322lb-sf28-a firmware (<= cipc-b2303.2.8.230105) • uniview ipc322lb-sf28-a firmware (<= dipc-b1213.6.5.230215) • uniview ipc322lb-sf28-a firmware (<= dipc-b1216.5.7.230109) • uniview ipc322lb-sf28-a firmware (<= dipc-b1221.3.5.221202) • uniview ipc322lb-sf28-a firmware (<= dipc-b1222.3.8.230223) • uniview ipc322lb-sf28-a firmware (<= dipc-b1225.3.3.221123) • uniview ipc322lb-sf28-a firmware (<= dipc-b1226.3.6.230105) • uniview ipc322lb-sf28-a firmware (<= dipc-b1219.2.67.221019) • uniview ipc322lb-sf28-a firmware (<= dipc-b1223.3.3.221123) • uniview ipc322lb-sf28-a firmware (<= dipc-b1228.2.65.230207) • uniview ipc322lb-sf28-a firmware (<= dipc-b1229.1.67.230104)

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References