| 标题 | Hipcam N/A N/A Information Disclosure |
|---|
| 描述 | The Hipcam device is vulnerable to unauthorized access, allowing an attacker to retrieve the MAC address of the device without proper authentication or authorization. By sending a specific HTTP request to the device, an attacker can obtain sensitive information about the device, which could be used for further exploitation or unauthorized access.
This vulnerability poses a moderate risk to the security of the Hipcam device and its users. Although the MAC address alone may not directly compromise the device or its network, it can be used as part of a reconnaissance phase in a larger attack. Furthermore, unauthorized access to device information undermines the confidentiality and integrity of the device's data, affecting over 722,000 devices on the Internet. |
|---|
| 来源 | ⚠️ https://netsecfish.notion.site/Unauthorized-Access-to-MAC-Address-in-Hipcam-Device-a9a8daeeda954e83af847eb27805dc99?pvs=4 |
|---|
| 用户 | netsecfish (UID 64568) |
|---|
| 提交 | 2024-05-11 04時28分 (2 年前) |
|---|
| 管理 | 2024-05-18 09時08分 (7 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 265078 [Hipcam Device 直到 20240511 MAC Address /log/wifi.mac 信息公开] |
|---|
| 积分 | 17 |
|---|