漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Command Injection in Smartwares cameras
Vulnerability Description
Smartwares cameras CIP-37210AT and C724IP, as well as others which share the same firmware in versions up to 3.3.0, are vulnerable to command injection. During the initialization process, a user has to use a mobile app to provide devices with Access Point credentials. This input is not properly sanitized, what allows for command injection. The vendor has not replied to reports, so the patching status remains unknown. Newer firmware versions might be vulnerable as well.
CVSS Information
N/A
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Vulnerability Title
Smartwares CIP-37210AT和Smartwares C724IP 安全漏洞
Vulnerability Description
Smartwares CIP-37210AT和Smartwares C724IP都是Smartwares公司的产品。Smartwares CIP-37210AT是一款 IP 摄像头设备，用于家庭或办公室的安全监控。Smartwares C724IP是一款 IP 摄像头设备，用于家庭或办公室的安全监控。 Smartwares CIP-37210AT和Smartwares C724IP 3.3.0及之前版本存在安全漏洞，该漏洞源于未适当清理输入，从而允许命令注入。
CVSS Information
N/A
Vulnerability Type
N/A