Eyeplus
Monthly
Remote unauthenticated denial of service in Eyeplus 57.0.0.0308 p2pcam HTTP parser allows an attacker who can reach the camera's HTTP/P2P service to crash the device by sending an over-long URI, exploiting a stack-based buffer overflow (CWE-121). Publicly available exploit code exists; CISA KEV does not list this CVE in the provided data, so it is not confirmed actively exploited. The vendor CVSS 4.0 score is 7.7 with PR:N/UI:N and only availability impact (VC:N/VI:N/VA:H), and the independent assessment likewise rates it as a denial-of-service flaw rather than code execution.
Unauthenticated snapshot disclosure in the Eyeplus IoT camera (version 57.0.0.0308) lets any attacker with network reachability to the device's p2pcam service retrieve a live camera snapshot from the /snapshot endpoint - no credentials, user interaction, or special configuration are required (CVSS:4.0 PR:N/UI:N/AC:L). Impact is confidentiality-only and low (VC:L, 6.9 base) with no integrity or availability effect, but publicly available exploit code exists: a proof-of-concept write-up is published in the GitHub advisory EYEPLUS-8001-Unauth-Snapshot-Disclosure, which raises the effective severity above the raw score. Real-world risk is governed by exposure, so cameras whose p2pcam/P2P service is reachable from the LAN, or from the internet when remote viewing is enabled, are the ones immediately affected.
Unauthenticated information disclosure in Eyeplus firmware 57.0.0.0308 lets remote attackers retrieve user account records - including plaintext passwords - by invoking the GetUsers operation on the ONVIF Device service at /onvif/Device. Both the vendor CVSS 4.0 vector (6.9) and the independent assessment (CVSS 3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) agree the flaw is network-reachable, unauthenticated (PR:N), requires no user interaction, and yields high confidentiality impact with no integrity or availability effect. Publicly available exploit code exists (a GitHub proof-of-concept advisory), and because credentials are returned in cleartext the exposure is especially severe - the only limiting factor is network reachability of the ONVIF interface, which is frequently LAN-restricted unless the device is internet-exposed or port-forwarded.
Remote unauthenticated denial of service in Eyeplus 57.0.0.0308 p2pcam HTTP parser allows an attacker who can reach the camera's HTTP/P2P service to crash the device by sending an over-long URI, exploiting a stack-based buffer overflow (CWE-121). Publicly available exploit code exists; CISA KEV does not list this CVE in the provided data, so it is not confirmed actively exploited. The vendor CVSS 4.0 score is 7.7 with PR:N/UI:N and only availability impact (VC:N/VI:N/VA:H), and the independent assessment likewise rates it as a denial-of-service flaw rather than code execution.
Unauthenticated snapshot disclosure in the Eyeplus IoT camera (version 57.0.0.0308) lets any attacker with network reachability to the device's p2pcam service retrieve a live camera snapshot from the /snapshot endpoint - no credentials, user interaction, or special configuration are required (CVSS:4.0 PR:N/UI:N/AC:L). Impact is confidentiality-only and low (VC:L, 6.9 base) with no integrity or availability effect, but publicly available exploit code exists: a proof-of-concept write-up is published in the GitHub advisory EYEPLUS-8001-Unauth-Snapshot-Disclosure, which raises the effective severity above the raw score. Real-world risk is governed by exposure, so cameras whose p2pcam/P2P service is reachable from the LAN, or from the internet when remote viewing is enabled, are the ones immediately affected.
Unauthenticated information disclosure in Eyeplus firmware 57.0.0.0308 lets remote attackers retrieve user account records - including plaintext passwords - by invoking the GetUsers operation on the ONVIF Device service at /onvif/Device. Both the vendor CVSS 4.0 vector (6.9) and the independent assessment (CVSS 3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) agree the flaw is network-reachable, unauthenticated (PR:N), requires no user interaction, and yields high confidentiality impact with no integrity or availability effect. Publicly available exploit code exists (a GitHub proof-of-concept advisory), and because credentials are returned in cleartext the exposure is especially severe - the only limiting factor is network reachability of the ONVIF interface, which is frequently LAN-restricted unless the device is internet-exposed or port-forwarded.