Threats tagged 'ghsa-h65q-x56f-vc5f'

Puwell Technology Inc. IP Cameras with firmware versions 2.x through 3.0.0 (exclusive) have an authentication bypass vulnerability. This flaw allows unauthenticated attackers to send specially crafted packets over TCP port 23456 to access critical device functions without credentials. Exploitation can lead to unauthorized access to live video streams, control of pan and tilt motors, activation of audio features, and remote device restarts. The vulnerability has a critical severity with a CVSS 4.0 score of 9.3. No official patch or remediation guidance is currently available from the vendor.