CVE Catalog
CVE-2017-8225
CriticalSummary
On Wireless IP Camera (P2P) WIFICAM devices, access to .ini files (containing credentials) is not correctly checked. An attacker can bypass authentication by providing an empty loginuse parameter and an empty loginpas parameter in the URI.
Risk Assessment
Improper access checks to configuration files may lead to credential exposure, posing a serious security threat to the system.
Recommendation
It is recommended to implement proper access verification mechanisms for .ini files and secure URI parameters against empty values.
Original NVD description (English source)
On Wireless IP Camera (P2P) WIFICAM devices, access to .ini files (containing credentials) is not correctly checked. An attacker can bypass authentication by providing an empty loginuse parameter and an empty loginpas parameter in the URI.