Threat Investigation
Request a demo

CVE-2022-24610

High

Description

Settings/network settings/wireless settings on the Alecto DVC-215IP camera version 63.1.1.173 and below shows the Wi-Fi passphrase hidden, but by editing/removing the style of the password field the password becomes visible which grants access to an internal network connected to the camera.

SeverityHigh
CVSS8.6
Exploit probability—
ProductAlecto Dvc-215ip Firmware
PublishedFeb 24, 2022
First seenFeb 24, 2022

How to fix

Update
  • alecto dvc-215ip_firmware63.1.1.173 or later

Affected products

ProductAffected versionsFixed in
alecto dvc-215ip_firmware63.1.1.137 ≤ v < 63.1.1.17363.1.1.173

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.