Threats tagged 'ghsa-4p3q-h8vm-q7v8'

The CareCam HMT.CM2507 IP camera firmware version 251211.1507 contains a vulnerability where the privileged account exposed via the ONVIF management service accepts an empty password. This allows an attacker with network access to gain privileged management functions and retrieve sensitive device configuration information. The vulnerability is classified as CWE-258 (Use of Hard-coded or Default Credentials) and has a CVSS 3.1 score of 7.5, indicating high severity.