ACE Security WiP-90113 HD Camera Remote Configuration Disclosure Vulnerability

A configuration disclosure vulnerability has been identified in the ACE Security WiP-90113 HD Camera. This vulnerability allows unauthenticated attackers to retrieve sensitive configuration files, including credentials and system settings. The issue arises from the camera's /config_backup.bin endpoint, which can be accessed by sending a GET request. The vulnerability is present in the camera's firmware prior to the latest version.

Impact

Exploitation of this vulnerability leads to unauthorized access to sensitive configuration files, including usernames and passwords.

Reproduction

To reproduce this vulnerability, send a GET request to the camera's /config_backup.bin endpoint. The response will include a gzipped configuration file that, when unzipped, reveals sensitive information such as the camera's username and password.