Vilar VS-IPC1002 IP cameras have a vulnerability that allows unauthenticated attackers on the same local network to cause a denial-of-service (DoS) by sending a crafted request to the /cgi-bin/action endpoint. This causes the device to become completely unresponsive and requires a manual restart. Only version 1.1.0.18 was tested, and other versions may also be affected. No vendor response or patch is available.