Vilar VS-IPC1002 IP Cameras Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Vilar VS-IPC1002 IP cameras, specifically in version 1.1.0.18. An unauthenticated attacker on the same local network can send a crafted request to the '/cgi-bin/action' endpoint, causing the device to become completely unresponsive. This issue requires a manual restart of the camera to restore functionality. While only version 1.1.0.18 was tested, other versions may also be vulnerable.

Impact

Exploitation of this vulnerability leads to a complete denial-of-service condition, causing the device to become unresponsive and requiring a manual restart to restore normal operation.