CVE-2020-11623 Security feature bypass in n/a
Physical access to the UART interface allows attackers to bypass security controls, access bootloaders, and potentially render the camera inoperable.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-11623?
CVE-2020-11623 is a medium-severity vulnerability in n/a, published on 23 Jul 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438. An attacker with physical access to the UART interface could access additional diagnostic and configuration functionalities as well as the camera's bootloader. Successful exploitation could compromise confidentiality, integrity, and availability of the affected system. It could even render the device inoperable.
Which versions are affected by CVE-2020-11623?
It affects 2 products.
Products include Avertx Hd438 Firmware, Avertx Hd838 Firmware.
How do I fix CVE-2020-11623?
No fix has been published for CVE-2020-11623 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-11623 being exploited?
There is no known exploitation of CVE-2020-11623 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-2rhr-5rr8-pf6q.