← Back

Keruigroup

keruigroup

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Ypc99 Firmware
ypc99_firmware
2 CVEs
Ypc99
ypc99
0 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-13115
1Keruigroup
1Ypc99 Firmware
Nov 21, 2024
Oct 22, 2018
N/A· v4
6.5 MEDIUM· v3
6.4 MEDIUM· v2
Lack of an authentication mechanism in KERUI Wifi Endoscope Camera (YPC99) allows an attacker to watch or block the camera stream. The RTSP server on port 7070 accepts the command STOP to stop streaming, and the command...Show more
Lack of an authentication mechanism in KERUI Wifi Endoscope Camera (YPC99) allows an attacker to watch or block the camera stream. The RTSP server on port 7070 accepts the command STOP to stop streaming, and the command SETSSID to disconnect a user.Show less
CVE-2018-13114
1Keruigroup
1Ypc99 Firmware
Nov 21, 2024
Oct 22, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Missing authentication and improper input validation in KERUI Wifi Endoscope Camera (YPC99) allow an attacker to execute arbitrary commands (with a length limit of 19 characters) via the "ssid" value, as demonstrated by...Show more
Missing authentication and improper input validation in KERUI Wifi Endoscope Camera (YPC99) allow an attacker to execute arbitrary commands (with a length limit of 19 characters) via the "ssid" value, as demonstrated by ssid:;ping 192.168.1.2 in the body of a SETSSID command.Show less