MOBOTIX Q24 Hemispheric IP Camera

Platform Information http://www.mobotix-camera.nl/cameras/mobotix-q24/
Search Engine Search on Google
End of Sales Yes more info
End of Support Yes more info
Wired Connection Yes
Wireless Connection -
Fingerprinting Source HTTPS NIC VENDOR
Added at May 14, 2019
Manufacturer Name MOBOTIX AG
Homepage https://www.mobotix.com
Headquarters Germany
Business Status Ongoing
Acquisition Company Konica Minolta Inc. more info
Acquisition Company Homepage https://www.konicaminolta.com/eu-en/

Platform’s Common Vulnerabilities and Exposures (CVE)
CVE-ID
Severity v3.0
Severity v2.0
Description
No records found.
Manufacturer’s Common Vulnerabilities and Exposures (CVE)
CVE-ID
Severity v3.0
Severity v2.0
Description
CVE-2019-12502
05/31/2019
HIGH
HIGH
There is a lack of CSRF countermeasures on MOBOTIX S14 MX-V4.2.1.61 cameras, as demonstrated by adding an admin account via the /admin/access URI.
CVE-2019-7675
02/09/2019
HIGH
MEDIUM
An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. The default management application is delivered over cleartext HTTP with Basic Authentication, as demonstrated by the /admin/index.html URI.
CVE-2019-7674
02/09/2019
CRITICAL
MEDIUM
An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. /admin/access accepts a request to set the "aaaaa" password, considered insecure for some use cases, from a user.
CVE-2019-7673
02/09/2019
HIGH
MEDIUM
An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. Administrator Credentials are stored in the 13-character DES hash format.
CVE-2009-5154
02/09/2019
CRITICAL
HIGH
An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. There is a default password of meinsm for the admin account.