Active Exploitation of Multiple Vendor Camera System Attack

What is the Attack?



There are numerous active attacks on Camera Systems. The following are the significant ones:


CVE-2018-15745: A directory traversal vulnerability in Argus Surveillance DVR caused by an improper validation of user supplied data when the vulnerable application handles a maliciously crafted request. An attacker can exploit this to gain access to sensitive information in the context of the vulnerable application via a crafted request.
CVE-2018-10661 and CVE-2018-10662: An authentication bypass vulnerability in Axis Communications security cameras caused …

application argus attack attacks camera cve data directory directory traversal dvr exploit exploitation request surveillance system systems validation vendor vulnerability vulnerable vulnerable application what is