Vulnerability: Privilege Escalation in Cellinx Camera with Guest Enabled

Vulnerability: Privilege Escalation in Cellinx Camera with Guest Enabled

CVE-2022-30620 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

On Cellinx Camera with guest enabled, attacker with web access can elevate privileges to administrative: "1" to "0" privileges by changing the following cookie values from "is_admin", "showConfig". Administrative Privileges which allows changing various configuration in the camera.

Learn more about our Web App Pen Testing.