← Back

Nightowlsp

nightowlsp

2 CVEs • 4 products

Products (4)

Click to collapse
Toggle
Wdb 20 Firmware
wdb-20_firmware
1 CVE
Smart Doorbell Firmware
smart_doorbell_firmware
1 CVE
Wdb 20
wdb-20
0 CVEs
Smart Doorbell
smart_doorbell
0 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-28713
1Nightowlsp
1Smart Doorbell Firmware
Nov 21, 2024
Jun 8, 2021
N/A· v4
6.5 MEDIUM· v3
5.8 MEDIUM· v2
Incorrect access control in push notification service in Night Owl Smart Doorbell FW version 20190505 allows remote users to send push notification events via an exposed PNS server. A remote attacker can passively record...Show more
Incorrect access control in push notification service in Night Owl Smart Doorbell FW version 20190505 allows remote users to send push notification events via an exposed PNS server. A remote attacker can passively record push notification events which are sent over an insecure web request. The web service does not authenticate requests, and allows attackers to send an indefinite amount of motion or doorbell events to a user's mobile application by either replaying or deliberately crafting false events.Show less
CVE-2021-31793
1Nightowlsp
1Wdb 20 Firmware
Nov 21, 2024
May 6, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue exists on NightOwl WDB-20-V2 WDB-20-V2_20190314 devices that allows an unauthenticated user to gain access to snapshots and video streams from the doorbell. The binary app offers a web server on port 80 that all...Show more
An issue exists on NightOwl WDB-20-V2 WDB-20-V2_20190314 devices that allows an unauthenticated user to gain access to snapshots and video streams from the doorbell. The binary app offers a web server on port 80 that allows an unauthenticated user to take a snapshot from the doorbell camera via the /snapshot URI.Show less