Cellinx NVT IP PTZ Camera Cookie is_admin/showConfig access control

A vulnerability classified as critical has been found in Cellinx NVT IP PTZ Camera (the affected version unknown). This affects an unknown part of the component Cookie Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Field07/19/2022 11:08 AM08/06/2022 01:20 PM
cvss3_vuldb_avNN
cvss3_vuldb_acLL
cvss3_vuldb_prLL
cvss3_vuldb_uiRR
cvss3_vuldb_sUU
cvss3_vuldb_cLL
cvss3_vuldb_iLL
cvss3_vuldb_aLL
cvss3_vuldb_rcRR
cvss3_cna_avNN
cvss3_cna_acLL
cvss3_cna_prLL
cvss3_cna_uiRR
cvss3_cna_sCC
cvss3_cna_cLL
cvss3_cna_iLL
cvss3_cna_aHH
urlhttps://www.gov.il/en/departments/faq/cve_advisorieshttps://www.gov.il/en/departments/faq/cve_advisories
cveCVE-2022-30620CVE-2022-30620
cve_assigned1652306400 (05/12/2022)1652306400 (05/12/2022)
cve_cnaIsrael National Cyber DirectorateIsrael National Cyber Directorate
cve_nvd_summaryOn Cellinx Camera with guest enabled, attacker with web access can elevate privileges to administrative: "1" to "0" privileges by changing the following cookie values from "is_admin", "showConfig". Administrative Privileges which allows changing various configuration in the camera.On Cellinx Camera with guest enabled, attacker with web access can elevate privileges to administrative: "1" to "0" privileges by changing the following cookie values from "is_admin", "showConfig". Administrative Privileges which allows changing various configuration in the camera.
date1658181600 (07/19/2022)1658181600 (07/19/2022)
cvss2_vuldb_avNN
cvss2_vuldb_acLL
cvss2_vuldb_ciPP
cvss2_vuldb_iiPP
cvss2_vuldb_aiPP
cvss2_vuldb_rcURUR
cvss2_vuldb_auSS
cvss2_vuldb_eNDND
cvss2_vuldb_rlNDND
cvss3_vuldb_eXX
cvss3_vuldb_rlXX
cvss3_cna_basescore8.28.2
cvss2_vuldb_basescore6.56.5
cvss2_vuldb_tempscore6.26.2
cvss3_vuldb_basescore5.55.5
cvss3_vuldb_tempscore5.35.3
cvss3_meta_basescore6.87.5
cvss3_meta_tempscore6.77.4
price_0day$0-$5k$0-$5k
vendorCellinx NVTCellinx NVT
nameIP PTZ CameraIP PTZ Camera
componentCookie HandlerCookie Handler
argumentis_admin/showConfigis_admin/showConfig
cwe284 (access control)284 (access control)
risk22
cvss3_nvd_avN
cvss3_nvd_acL
cvss3_nvd_prL
cvss3_nvd_uiN
cvss3_nvd_sU
cvss3_nvd_cH
cvss3_nvd_iH
cvss3_nvd_aH
cvss3_nvd_basescore8.8

Do you need the next level of professionalism?

Upgrade your account now!