Description
On Cellinx Camera with guest enabled, attacker with web access can elevate privileges to administrative: "1" to "0" privileges by changing the following cookie values from "is_admin", "showConfig". Administrative Privileges which allows changing various configuration in the camera.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cellinx | Cellinx NVT - IP PTZ Camera | 3.2.1 – < 3.2.0* | 3.2.0* |