CVE-2024-5633

Longse model LBH30FE200W cameras, as well as products based on this device, provide an unrestricted access for an attacker located in the same local network to an undocumented binary service CoolView on one of the ports.  An attacker with a knowledge of the available commands is able to perform read/write operations on the device's memory, which might result in e.g. bypassing telnet login and obtaining full access to the device.

Longse model LBH30FE200W cameras, as well as products based on this device, provide an unrestricted access for an attacker located in the same local network to an undocumented binary service CoolView on one of the ports.  An attacker with a knowledge of the available commands is able to perform read/write operations on the device's memory, which might result in e.g. bypassing telnet login and obtaining full access to the device.

Las cámaras Longse modelo LBH30FE200W, así como los productos basados en este dispositivo, proporcionan acceso ilimitado a un atacante ubicado en la misma red local a un servicio binario no documentado CoolView en uno de los puertos. Un atacante con conocimiento de los comandos disponibles puede realizar operaciones de lectura/escritura en la memoria del dispositivo, lo que podría dar como resultado, por ejemplo, eludir el inicio de sesión de telnet y obtener acceso completo al dispositivo.