CVE-2021-4469

49th percentile - higher than 49% of all known CVEs

Denver SHO-110 IP cameras expose a secondary HTTP service on TCP port 8001 that provides access to a '/snapshot' endpoint without authentication. While the primary web interface on port 80 enforces authentication, the backdoor service allows any remote attacker to retrieve image snapshots by directly requesting the 'snapshot' endpoint. An attacker can repeatedly collect snapshots and reconstruct the camera stream, compromising the confidentiality of the monitored environment.

The organization is exposed to unauthorized viewing of the monitored environment, which can lead to privacy and physical security breaches. Disclosure of the video stream may allow an attacker to observe activities and plan further attacks.

Block access to TCP port 8001 on the network firewall or router to prevent remote access to the backup service. Also, contact the manufacturer to obtain a firmware update that eliminates this vulnerability.