Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown
CVE-2020-19643
Disclosure Date: March 30, 2021 (last updated February 22, 2025)
Cross Site Scripting (XSS) vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B via all fields in the FTP settings page to the "goform/formSetFtpCfg" settings page.
0
Attacker Value
Unknown
CVE-2020-19640
Disclosure Date: March 30, 2021 (last updated November 28, 2024)
An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. An unauthenticated attacker can reboot the device causing a Denial of Service, via a hidden reboot command to '/media/?action=cmd'.
0
Attacker Value
Unknown
CVE-2020-19641
Disclosure Date: March 30, 2021 (last updated February 22, 2025)
An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. Authenticated attackers with the "Operator" Privilege can gain admin privileges via a crafted request to '/goform/formUserMng'.
0
Attacker Value
Unknown
CVE-2020-19639
Disclosure Date: March 30, 2021 (last updated February 22, 2025)
Cross Site Request Forgery (CSRF) vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B, via all fields to WebUI.
0
Attacker Value
Unknown
CVE-2020-19642
Disclosure Date: March 30, 2021 (last updated February 22, 2025)
An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. A local attacker can execute arbitrary code via editing the 'recdata.db' file to call a specially crafted GoAhead ASP-file on the SD card.
0
