{ "id": "CVE-2023-0773", "sourceIdentifier": "vdisclose@cert-in.org.in", "published": "2023-09-19T10:15:07.743", "lastModified": "2023-09-21T19:24:14.093", "vulnStatus": "Analyzed", "descriptions": [ { "lang": "en", "value": "The vulnerability exists in Uniview IP Camera due to identification and authentication failure at its web-based management interface. A remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device.\n\nSuccessful exploitation of this vulnerability could allow the attacker to gain complete control of the targeted device.\n" }, { "lang": "es", "value": "La vulnerabilidad existe en Uniview IP Camera debido a un error de identificaci\u00f3n y autenticaci\u00f3n en su interfaz de administraci\u00f3n basada en web. Un atacante remoto podr\u00eda aprovechar esta vulnerabilidad mediante el env\u00edo de solicitudes HTTP especialmente manipuladas al dispositivo vulnerable. La explotaci\u00f3n correcta de esta vulnerabilidad podr\u00eda permitir al atacante obtener el control completo del dispositivo objetivo. " } ], "metrics": { "cvssMetricV31": [ { "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL" }, "exploitabilityScore": 3.9, "impactScore": 5.9 }, { "source": "vdisclose@cert-in.org.in", "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseScore": 9.1, "baseSeverity": "CRITICAL" }, "exploitabilityScore": 3.9, "impactScore": 5.2 } ] }, "weaknesses": [ { "source": "nvd@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "CWE-287" } ] }, { "source": "vdisclose@cert-in.org.in", "type": "Secondary", "description": [ { "lang": "en", "value": "CWE-287" } ] } ], "configurations": [ { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:uniview:ipc322lb-sf28-a_firmware:*:*:*:*:*:*:*:*", "versionEndIncluding": "cipc-b2303.2.8.230105", "matchCriteriaId": "B5C7EDBF-EB9D-442F-ADA7-100AFC0D7286" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:uniview:ipc322lb-sf28-a:-:*:*:*:*:*:*:*", "matchCriteriaId": "B5298AFB-78CE-4658-8BBA-B8B493B888A0" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:uniview:ipc322lb-sf28-a_firmware:*:*:*:*:*:*:*:*", "versionEndIncluding": "dipc-b1213.6.5.230215", "matchCriteriaId": "D008165F-F5E4-4016-BDB2-0864E4F02A29" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:uniview:ipc322lb-sf28-a:-:*:*:*:*:*:*:*", "matchCriteriaId": "B5298AFB-78CE-4658-8BBA-B8B493B888A0" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:uniview:ipc322lb-sf28-a_firmware:*:*:*:*:*:*:*:*", "versionEndIncluding": "dipc-b1216.5.7.230109", "matchCriteriaId": "1FFB54FF-9206-4C1D-8AAA-E42FE8BB0093" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:uniview:ipc322lb-sf28-a:-:*:*:*:*:*:*:*", "matchCriteriaId": "B5298AFB-78CE-4658-8BBA-B8B493B888A0" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:uniview:ipc322lb-sf28-a_firmware:*:*:*:*:*:*:*:*", "versionEndIncluding": "dipc-b1221.3.5.221202", "matchCriteriaId": "52498C65-6EB4-42A5-BF79-13523E20A0C9" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:uniview:ipc322lb-sf28-a:-:*:*:*:*:*:*:*", "matchCriteriaId": "B5298AFB-78CE-4658-8BBA-B8B493B888A0" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:uniview:ipc322lb-sf28-a_firmware:*:*:*:*:*:*:*:*", "versionEndIncluding": "dipc-b1222.3.8.230223", "matchCriteriaId": "56A662E6-FFF9-47EB-868D-DE16F886C581" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:uniview:ipc322lb-sf28-a:-:*:*:*:*:*:*:*", "matchCriteriaId": "B5298AFB-78CE-4658-8BBA-B8B493B888A0" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:uniview:ipc322lb-sf28-a_firmware:*:*:*:*:*:*:*:*", "versionEndIncluding": "dipc-b1225.3.3.221123", "matchCriteriaId": "7E5B7EB5-E269-4185-BBF8-4D23A6E2E9BC" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:uniview:ipc322lb-sf28-a:-:*:*:*:*:*:*:*", "matchCriteriaId": "B5298AFB-78CE-4658-8BBA-B8B493B888A0" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:uniview:ipc322lb-sf28-a_firmware:*:*:*:*:*:*:*:*", "versionEndIncluding": "dipc-b1226.3.6.230105", "matchCriteriaId": "BEF7FC48-2097-4194-A45B-E1F6347F33E9" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:uniview:ipc322lb-sf28-a:-:*:*:*:*:*:*:*", "matchCriteriaId": "B5298AFB-78CE-4658-8BBA-B8B493B888A0" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:uniview:ipc322lb-sf28-a_firmware:*:*:*:*:*:*:*:*", "versionEndIncluding": "dipc-b1219.2.67.221019", "matchCriteriaId": "23F6F87F-223D-4957-82F9-21E756833871" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:uniview:ipc322lb-sf28-a:-:*:*:*:*:*:*:*", "matchCriteriaId": "B5298AFB-78CE-4658-8BBA-B8B493B888A0" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:uniview:ipc322lb-sf28-a_firmware:*:*:*:*:*:*:*:*", "versionEndIncluding": "dipc-b1223.3.3.221123", "matchCriteriaId": "09393513-A9F8-4DC9-9492-2474C245E1D2" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:uniview:ipc322lb-sf28-a:-:*:*:*:*:*:*:*", "matchCriteriaId": "B5298AFB-78CE-4658-8BBA-B8B493B888A0" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:uniview:ipc322lb-sf28-a_firmware:*:*:*:*:*:*:*:*", "versionEndIncluding": "dipc-b1228.2.65.230207", "matchCriteriaId": "36C5053B-2A20-423E-96B6-6D5CDCF76A1B" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:uniview:ipc322lb-sf28-a:-:*:*:*:*:*:*:*", "matchCriteriaId": "B5298AFB-78CE-4658-8BBA-B8B493B888A0" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:uniview:ipc322lb-sf28-a_firmware:*:*:*:*:*:*:*:*", "versionEndIncluding": "dipc-b1229.1.67.230104", "matchCriteriaId": "370A62EA-B1D2-4D52-A872-B974A2CA6CD5" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:uniview:ipc322lb-sf28-a:-:*:*:*:*:*:*:*", "matchCriteriaId": "B5298AFB-78CE-4658-8BBA-B8B493B888A0" } ] } ] } ], "references": [ { "url": "https://global.uniview.com/About_Us/Security/Notice/202309/976482_140493_0.htm", "source": "vdisclose@cert-in.org.in", "tags": [ "Vendor Advisory" ] }, { "url": "https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0270", "source": "vdisclose@cert-in.org.in", "tags": [ "Third Party Advisory" ] } ] }