ALinking ALC-9451/ALC-9452 Network Cameras Hardcoded Credentials Security Bypass Vulnerability

Bugtraq ID:	61121
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 11 2013 12:00AM
Updated:	Jul 11 2013 12:00AM
Credit:	Roberto Paleari and Alessandro Di Pinto
Vulnerable:	Alinking ALC-9452 Network Camera 1.33 Alinking ALC-9451 Network Camera 1.33
Not Vulnerable:

ALinking ALC-9451/ALC-9452 Network Cameras Hardcoded Credentials Security Bypass Vulnerability

ALinking ALC-9451 and ALC-9452 Network Cameras are prone to a security-bypass vulnerability caused by hard-coded credentials.

An attacker can leverage this issue to gain administrative access to the vulnerable device.

ALC-9451 and ALC-9452 Network Cameras running firmware version 1.33 are vulnerable; other versions may also be affected.

ALinking ALC-9451/ALC-9452 Network Cameras Hardcoded Credentials Security Bypass Vulnerability

Attackers can use standard, readily available tools to exploit this issue.

ALinking ALC-9451/ALC-9452 Network Cameras Hardcoded Credentials Security Bypass Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

ALinking ALC-9451/ALC-9452 Network Cameras Hardcoded Credentials Security Bypass Vulnerability

References:

• Alinking Homepage (Alinking)
  
• Hard-coded accounts on multiple network cameras (roberto paleari)