AZIOT 2MP Full HD Smart Wi-Fi CCTV Access Control Vulnerability Allowing Root Access and Credential Exposure

An incorrect access control vulnerability has been identified in the firmware of the AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera, specifically in version V1.00.02. This vulnerability allows local attackers to gain root shell access. Once root access is obtained, the device exposes critical data, including Wi-Fi credentials and ONVIF service authentication details, both stored in plaintext. This lack of proper access control and encryption enables further compromise of the network and connected systems.

Impact

Exploitation of this vulnerability leads to unauthorized root access on the device, allowing full control over the camera. Additionally, it exposes sensitive credentials in plaintext, including Wi-Fi and ONVIF service authentication details, which could be used to compromise the user's network and connected systems.