CVE-2022-24610

Published: Feb 24, 2022Modified: Jun 17, 2026

8.6

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 4.0

Source: NVD

Description

Settings/network settings/wireless settings on the Alecto DVC-215IP camera version 63.1.1.173 and below shows the Wi-Fi passphrase hidden, but by editing/removing the style of the password field the password becomes visible which grants access to an internal network connected to the camera.

Affected (1)

Products: Alecto: Dvc 215ip Firmware

1 product

Dvc 215ip Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Alecto Dvc 215ip Firmware	From 63.1.1.137 to 63.1.1.173

Running on/with	Platform Versions
Alecto Dvc 215ip	All versions

Related CWEs

Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (2)

https://support.alecto.nl/nl/support/solutions/articles/48001210271-kwetsbaarheid-vulnerability-firmware-below-version-63-1-1-173

Source: cve@mitre.org

Vendor Advisory

https://support.alecto.nl/nl/support/solutions/articles/48001210271-kwetsbaarheid-vulnerability-firmware-below-version-63-1-1-173

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.