Cp Plus
Monthly
Hardcoded HTTP Digest authentication credentials baked into CP Plus CP-XR-DE21-S Router firmware grant any adjacent-network attacker full administrative access without valid credentials. Because the credentials are identical across every device running the affected firmware, a single firmware extraction exposes the entire deployed population. No active exploitation is confirmed by CISA KEV, but the trivially low exploitation complexity and total administrative compromise make this a high-priority remediation target for any network where this router is deployed.
Unauthenticated attackers can gain access to live video snapshots from CP PLUS EZ-P21 IP Camera (v4.8.8.1 and prior) by brute‐forcing the HTTP authentication endpoint. The vulnerability stems from a missing brute‐force protection mechanism, allowing remote password guessing without rate limiting or account lockout. Successful exploitation reveals high‐confidentiality video data. No active exploitation or public exploit code is known at this time.
Physical exploitation of an insecure debug feature in CP PLUS EZ-P21 IP Camera firmware allows attackers to execute arbitrary code with elevated privileges. Firmware versions v4.8.8.1 and earlier are affected. Exploitation requires physical access to insert removable media containing a malicious payload, but no authentication or user interaction is needed.
Stored cross-site scripting in CP Plus 1xxx series Network Video Recorder (NVR) devices, specifically the CP-UNR-108F1 hardware/web/system components, allows authenticated high-privileged attackers to inject persistent JavaScript payloads into backend storage that execute in administrators' browsers on page load. With CVSS 8.4 and a Scope:Changed vector, successful exploitation enables session hijacking, unauthorized administrative actions against the video surveillance device, and theft of footage or credentials. No public exploit identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Memory extraction via the UART debug interface on CP Plus Wi-Fi Camera firmware v02.21.031 and below exposes cryptographic private keys, Wi-Fi credentials, and device configuration stored unprotected in runtime RAM. An attacker with physical access to an affected device can connect to the hardware UART port and dump memory contents without software-level authentication, yielding secrets sufficient to join the protected wireless network and decrypt communications. No public exploit code exists and EPSS is 0.01% (2nd percentile), with SSVC confirming no known exploitation - risk is confined to physical-access scenarios such as device theft, rogue insiders, or supply-chain compromise.
Hardcoded HTTP Digest authentication credentials baked into CP Plus CP-XR-DE21-S Router firmware grant any adjacent-network attacker full administrative access without valid credentials. Because the credentials are identical across every device running the affected firmware, a single firmware extraction exposes the entire deployed population. No active exploitation is confirmed by CISA KEV, but the trivially low exploitation complexity and total administrative compromise make this a high-priority remediation target for any network where this router is deployed.
Unauthenticated attackers can gain access to live video snapshots from CP PLUS EZ-P21 IP Camera (v4.8.8.1 and prior) by brute‐forcing the HTTP authentication endpoint. The vulnerability stems from a missing brute‐force protection mechanism, allowing remote password guessing without rate limiting or account lockout. Successful exploitation reveals high‐confidentiality video data. No active exploitation or public exploit code is known at this time.
Physical exploitation of an insecure debug feature in CP PLUS EZ-P21 IP Camera firmware allows attackers to execute arbitrary code with elevated privileges. Firmware versions v4.8.8.1 and earlier are affected. Exploitation requires physical access to insert removable media containing a malicious payload, but no authentication or user interaction is needed.
Stored cross-site scripting in CP Plus 1xxx series Network Video Recorder (NVR) devices, specifically the CP-UNR-108F1 hardware/web/system components, allows authenticated high-privileged attackers to inject persistent JavaScript payloads into backend storage that execute in administrators' browsers on page load. With CVSS 8.4 and a Scope:Changed vector, successful exploitation enables session hijacking, unauthorized administrative actions against the video surveillance device, and theft of footage or credentials. No public exploit identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Memory extraction via the UART debug interface on CP Plus Wi-Fi Camera firmware v02.21.031 and below exposes cryptographic private keys, Wi-Fi credentials, and device configuration stored unprotected in runtime RAM. An attacker with physical access to an affected device can connect to the hardware UART port and dump memory contents without software-level authentication, yielding secrets sufficient to join the protected wireless network and decrypt communications. No public exploit code exists and EPSS is 0.01% (2nd percentile), with SSVC confirming no known exploitation - risk is confined to physical-access scenarios such as device theft, rogue insiders, or supply-chain compromise.