CVE-2018-18602
Published Dec 31, 2018The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access and monitoring.
Vendor/product archive
2 CVEs tagged to guardzilla / 180_indoor_firmware — 1 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.
The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access and monitoring.
The remote upgrade feature in Guardzilla GZ180 devices allow command injection via a crafted new firmware version parameter.