CNNVD-202511-2832 Information

CNNVD ID

CNNVD-202511-2832

CVE-2020-36874

  • CNNVD Published: 2025-11-26

Description (Chinese)

ACE SECURITY WIP-90113是日本ACE SECURITY公司的一款高清摄像头。 ACE SECURITY WIP-90113存在访问控制错误漏洞,该漏洞源于/web/cgi-bin/hi3510/backup.cgi端点未经验证即可远程下载压缩配置备份,可能导致摄像头或连接的网络进一步被破解。

Description (English)

ACE SECURITY WIP-90113 is a high-resolution camera of ACE SECURITY of Japan. ACE SECURITY WIP-90113 has an access control error loophole, which originates from/web/cgi-bin/hi3510/backup.cgi endpoints that can be downloaded remotely to compress the configuration back-up without authentication, which may lead to further breakdown of the camera or connected network.

Hazard Level

Medium

Vulnerability Type

访问控制错误

Affected Vendor

ACE SECURITY

Published

2025-11-26

Last Modified

2026-02-24

References

https://cxsecurity.com/issue/WLB-2020020137 https://packetstorm.news/files/id/156497/ https://acesecurity.jp/support/top/wip_series/wip-90113 https://www.vulncheck.com/advisories/ace-security-wip90113-unauthenticated-config-disclosure https://access.redhat.com/security/cve/cve-2020-36874

Share on: