Exploitation Summary
EIP tracks 1 public exploit for CVE-2019-25247. PoCs published by LiquidWorm.
AI-analyzed exploit summary This exploit demonstrates a CSRF vulnerability in Beward N100 IP Camera M2.1.6, allowing an attacker to add an admin user via a crafted HTTP request. The PoC uses a hidden HTML form to submit the payload, bypassing authentication checks.
Description
Beward N100 H.264 VGA IP Camera M2.1.6 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without proper request validation. Attackers can craft a malicious web page with a hidden form to add an admin user by tricking a logged-in user into submitting the form.
Exploits (1)
This exploit demonstrates a CSRF vulnerability in Beward N100 IP Camera M2.1.6, allowing an attacker to add an admin user via a crafted HTTP request. The PoC uses a hidden HTML form to submit the payload, bypassing authentication checks.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N