Ajy Ipc Firmware
Monthly
Path traversal in AJCloud's AJY IPC camera firmware (jdbhttpd web service, port 80) allows unauthenticated remote attackers to read arbitrary files with root privileges on devices running firmware prior to 01.10715.11.37. Sensitive data directly accessible includes cleartext RTSP credentials, Wi-Fi SSID and pre-shared key, device serial numbers, and cloud binding parameters, enabling material follow-on attacks beyond the device itself. No public exploit code has been identified at time of analysis, but the attack primitive requires no authentication and no special conditions beyond network reachability.
Path traversal in AJCloud's AJY IPC camera firmware (jdbhttpd web service, port 80) allows unauthenticated remote attackers to read arbitrary files with root privileges on devices running firmware prior to 01.10715.11.37. Sensitive data directly accessible includes cleartext RTSP credentials, Wi-Fi SSID and pre-shared key, device serial numbers, and cloud binding parameters, enabling material follow-on attacks beyond the device itself. No public exploit code has been identified at time of analysis, but the attack primitive requires no authentication and no special conditions beyond network reachability.