Description
Beward N100 H.264 VGA IP Camera M2.1.6 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without proper request validation. Attackers can craft a malicious web page with a hidden form to add an admin user by tricking a logged-in user into submitting the form.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Beward R&D | N100 H.264 VGA IP Camera | M2.1.6.04C014 | — |
References
- ExploitDB-46318 exploit
- Official Product Homepage product
- Zero Science Lab Disclosure (ZSL-2019-5510) third-party-advisory