CVE-2022-24610

Settings/network settings/wireless settings on the Alecto DVC-215IP camera version 63.1.1.173 and below shows the Wi-Fi passphrase hidden, but by editing/removing the style of the password field the password becomes visible which grants access to an internal network connected to the camera.

Score

CVSS 3.1 8.6 High

Status

Modified - cve@mitre.org

Published

2022-02-24

Last modified

2024-08-03

Weaknesses

CWE-522

Affected products

• Dvc-215ip Firmware (Alecto)

References

• https://support.alecto.nl/nl/support/solutions/articles/48001210271-kwetsbaarheid-vulnerability-firmware-below-version-…