Cellinx Nvt - Ip Ptz Camera CVEs and Security Vulnerabilities

Vulnerabilities (Cellinx Nvt - Ip Ptz Camera)

CVE-2022-30621

Cellinx NVT – IP PTZ Camera local file inclusion

Allows a remote user to read files on the camera's OS "GetFileContent.cgi". Reading arbitrary files on the camera's OS as root user.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed

Vendors

Cellinx

Products

Cellinx Nvt - Ip Ptz Camera Cellinx Nvt - Ip Ptz Camera Firmware

CVE-2022-30620

Cellinx NVT – IP PTZ Camera Privilege Escalation

On Cellinx Camera with guest enabled, attacker with web access can elevate privileges to administrative: "1" to "0" privileges by changing the following cookie values from "is_admin", "showConfig". Administrative Privileges which allows changing various configuration in the camera.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed