Security Advisory
CVE-2020-37146
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
ACE Security WiP-90113 HD Camera contains a configuration disclosure vulnerability that allows unauthenticated attackers to retrieve sensitive configuration files. Attackers can access the cameras configuration backup by sending a GET request to the /config_backup.bin endpoint, exposing credentials and system settings.