← Back

CVE-2019-12919

nvd nist
Published: Jun 20, 2019Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the local network has unauthenticated access to the internal SD card via the HTTP service on port 8000. The HTTP web server on the camera allows anyone to view or download the video archive recorded and saved on the external memory card attached to the device.

Affected (2)

Cylan
2 products
Clever Dog Smart Camera Panorama Dog 2w Firmware
Clever Dog Smart Camera Plus Dog 2w V4 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Clever Dog Smart Camera Panorama Dog 2w Firmware
All versions
Running on/withPlatform Versions
Cylan
Clever Dog Smart Camera Panorama Dog 2w
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Clever Dog Smart Camera Plus Dog 2w V4 Firmware
All versions
Running on/withPlatform Versions
Cylan
Clever Dog Smart Camera Plus Dog 2w V4
All versions

Related CWEs

CWE-306
Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (2)

Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.