The server in Citilog 8.0 allows an attacker (in a man in the middle position between the server and its smart camera Axis M1125) to see FTP credentials in a cleartext HTTP traffic. These can be used for FTP access to the server.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2022-07-21T00:00:00
Updated: 2024-08-03T06:03:53.152Z
Reserved: 2022-04-08T00:00:00
Link: CVE-2022-28861
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-07-21T16:15:08.987
Modified: 2023-07-28T02:15:10.313
Link: CVE-2022-28861
Redhat
No data.