Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2025-53701

XSS vulnerability in Vilar VS-IPC1002 IP cameras

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERT-PL

Description

Vilar VS-IPC1002 IP cameras are vulnerable to Reflected XSS (Cross-site Scripting) attacks, because parameters in GET requests sent to /cgi-bin/action endpoint are not sanitized properly, making it possible to target logged in admin users. The vendor did not respond in any way. Only version 1.1.0.18 was tested, other versions might be vulnerable as well.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Vilar VS-IPC1002

Default version status: unknown

  • 1.1.0.18affected

References