CyberSecBulletin

Anpviz vulnerabilities

We track 2 vulnerabilities in Anpviz products across 17 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 28, 2024.

2vulnerabilities
2critical
0high
0exploited
9.9average CVSS score

Latest Anpviz vulnerabilities

  • 9.9 Critical severity

    ymf50b_firmware: Use of Hard-coded Cryptographic Key

    CVE-2024-35344Anpviz

    Certain Anpviz products contain a hardcoded cryptographic key stored in the firmware of the device. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D880, IPC-D280, IPC-D3180, MC800N, YM500L, YM800N_N2, YMF50B,

  • 9.8 Critical severity

    ipc-d250_firmware: Exposure of Sensitive Information to an Unauthorized Actor

    CVE-2024-35343Anpviz

    Certain Anpviz products allow unauthenticated users to download arbitrary files from the device's filesystem via a HTTP GET request to the /playback/ URI. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D880,