CVE-2024-35342
Last modified
CVE-2024-35342 is a medium-severity vulnerability rated 4.6/10 on the CVSS scale. Certain Anpviz products allow unauthenticated users to modify or disable camera related settings such as microphone volume, speaker volume, LED lighting, NTP, motion detection, etc. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D880, IPC-D280, IPC-D3180, MC800N, YM500L, YM800N_N2, YMF50B, YM800SV2, YM500L8, and YM200E10 firmware v3.2.2.2 and lower and possibly more vendors/models of IP camera.. EPSS estimates a 0.19% chance of exploitation in the next 30 days.
Description
Certain Anpviz products allow unauthenticated users to modify or disable camera related settings such as microphone volume, speaker volume, LED lighting, NTP, motion detection, etc. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D880, IPC-D280, IPC-D3180, MC800N, YM500L, YM800N_N2, YMF50B, YM800SV2, YM500L8, and YM200E10 firmware v3.2.2.2 and lower and possibly more vendors/models of IP camera.
Metrics
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-35342?
How severe is CVE-2024-35342?
How do I fix CVE-2024-35342?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-35333A stack-buffer-overflow vulnerability exists in the read_cha…8.4
- CVE-2024-35338Tenda i29V1.0 V1.0.0.5 was discovered to contain a hardcoded…9.8
- CVE-2024-35339Tenda FH1206 V1.2.0.8(8155) was discovered to contain a comm…9.8
- CVE-2024-3534A vulnerability, which was classified as critical, has been …9.8
- CVE-2024-35340Tenda FH1206 V1.2.0.8(8155) was discovered to contain a comm…8.6
- CVE-2024-35341Certain Anpviz products allow unauthenticated users to downl…7.5
- CVE-2024-35343Certain Anpviz products allow unauthenticated users to downl…9.8
- CVE-2024-35344Certain Anpviz products contain a hardcoded cryptographic ke…9.9
- CVE-2024-35345A vulnerability has been discovered in Diño Physics School A…5.4
- CVE-2024-35349A vulnerability has been discovered in Diño Physics School A…9.8
- CVE-2024-3535A vulnerability, which was classified as critical, was found…9.8
- CVE-2024-35350A vulnerability has been discovered in Diño Physics School A…9.8
Are you affected by CVE-2024-35342?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST