← Back

CVE-2022-38970

nvd nist
Published: Sep 26, 2022Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Exploitability: 1.2 / Impact: 5.2
Source: NVD

Description

ieGeek IG20 hipcam RealServer V1.0 is vulnerable to Incorrect Access Control. The algorithm used to generate device IDs (UIDs) for devices that utilize Shenzhen Yunni Technology iLnkP2P suffers from a predictability flaw that allows remote attackers to establish direct connections to arbitrary devices.

Affected (2)

Iegeek
1 product
Ig20 Firmware
Hipcam
1 product
Realserver
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ig20 Firmware
All versions
Running on/withPlatform Versions
Iegeek
Ig20
All versions
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Realserver
Version 1.0

Related CWEs

CWE-330
Use of Insufficiently Random Values
The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

References (2)

Source: cve@mitre.org
ExploitTechnical DescriptionThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitTechnical DescriptionThird Party Advisory

Timeline

No history available yet.