wanscam vulnerabilities

Products

• hw0021 firmware 2
• Wanscam HW0021 1

Latest wanscam CVEs

Newest publication first

1. CVE-2018-13111 There exists a partial Denial of Service vulnerability in Wanscam HW0021 IP Cameras. An attacker could craft a malicious POST request to crash the ONVIF service on such a device.

   Published 2018-09-21

   Medium·CVSS 5.9 EPSS 0.88%

   There exists a partial Denial of Service vulnerability in Wanscam HW0021 IP Cameras. An attacker could craft a malicious POST request to crash the ONVIF service on such a device.

2. CVE-2017-11510 An information leak exists in Wanscam's HW0021 network camera that allows an unauthenticated remote attacker to recover the administrator username and password via an ONVIF GetSnapshotUri request.

   Published 2018-03-28

   Critical·CVSS 9.8 EPSS 1.5%

   An information leak exists in Wanscam's HW0021 network camera that allows an unauthenticated remote attacker to recover the administrator username and password via an ONVIF GetSnapshotUri request.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.