Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.7

D3D Security IP Camera D8801: Weak Authentication Exposes User Credentials

CVE-2024-47789 · published 2 years ago
Summary

If you use an outdated D3D Security IP Camera D8801, a hacker could intercept and steal your login credentials. This is because the camera's security is not updated to use strong authentication methods. Since the manufacturer no longer supports this product, you should consider replacing it with a newer, more secure model.

Original advisory text
** UNSUPPORTED WHEN ASSIGNED ** This vulnerability exists in D3D Security IP Camera D8801 due to usage of weak authentication scheme of the HTTP header protocol where authorization tag contain a Ba...
** UNSUPPORTED WHEN ASSIGNED ** This vulnerability exists in D3D Security IP Camera D8801 due to usage of weak authentication scheme of the HTTP header protocol where authorization tag contain a Base-64 encoded username and password. A remote attacker could exploit this vulnerability by crafting a HTTP packet leading to exposure of user credentials of the targeted device. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
8.7 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-319Cleartext Transmission of Sensitive Information
Timeline
Published4 Oct 2024
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-47789 · NVD
Track software like this
Free during beta