i-PRO Surveillance Cameras Cross-Site Request Forgery Vulnerability
Vulnerability
A cross-site request forgery (CSRF) vulnerability has been identified in multiple network camera models provided by i-PRO Co., Ltd., including the WV-X Series, WV-S Series, and WV-U Series. This vulnerability affects versions prior to 2.80, 2.85, and 3.45. When a user views a specially crafted page while logged into the affected camera, it may trigger unintended actions.
Impact
Exploitation of this vulnerability could lead to unauthorized actions being performed on behalf of the user.
Remediation
Users are advised to update the camera's firmware to the latest version available. The updated versions can be downloaded from the i-PRO website.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.