{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T20:45:43.249Z",
  "tag": {
    "id": "ip-camera",
    "label": "IP cameras",
    "isStack": false,
    "url": "https://pwn.watch/t/ip-camera",
    "feed": "https://pwn.watch/t/ip-camera/feed.xml"
  },
  "counts": {
    "incidents": 4,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 2
  },
  "incidents": [
    {
      "slug": "reolink-rlc-410w-ip-camera-cve-2021-40407",
      "title": "Reolink RLC-410W IP Camera OS Command Injection",
      "url": "https://pwn.watch/i/reolink-rlc-410w-ip-camera-cve-2021-40407",
      "json": "https://pwn.watch/i/reolink-rlc-410w-ip-camera-cve-2021-40407.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "partial",
      "product": "Reolink RLC-410W IP Camera",
      "tags": [
        "reolink",
        "ip-camera",
        "cisa-kev",
        "rce"
      ],
      "cveIds": [
        "CVE-2021-40407"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory; CISA notes some models may be end-of-life"
      ],
      "startedAt": "2024-12-18",
      "closedAt": "2024-12-18",
      "updatedAt": "2024-12-18",
      "summary": "Reolink RLC-410W IP cameras contain an authenticated OS command injection vulnerability in the device network settings functionality. Added to the CISA KEV catalog on 2024-12-18. CVE-2021-40407 was assigned before 2024; the KEV listing came in 2024.",
      "xPost": null
    },
    {
      "slug": "reolink-multiple-ip-cameras-cve-2019-11001",
      "title": "Reolink Multiple IP Cameras OS Command Injection",
      "url": "https://pwn.watch/i/reolink-multiple-ip-cameras-cve-2019-11001",
      "json": "https://pwn.watch/i/reolink-multiple-ip-cameras-cve-2019-11001.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "partial",
      "product": "Reolink Multiple IP Cameras",
      "tags": [
        "reolink",
        "ip-camera",
        "cisa-kev",
        "rce"
      ],
      "cveIds": [
        "CVE-2019-11001"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory; CISA notes some models may be end-of-life"
      ],
      "startedAt": "2024-12-18",
      "closedAt": "2024-12-18",
      "updatedAt": "2024-12-18",
      "summary": "Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W IP cameras contain an authenticated OS command injection vulnerability. This vulnerability allows an authenticated admin to use the \"TestEmail\" functionality to inject and run OS commands as root. Added to the CISA KEV catalog on 2024-12-18. CVE-2019-11001 was assigned before 2024; the KEV listing came in 2024.",
      "xPost": null
    },
    {
      "slug": "ptzoptics-pt30x-sdi-ndi-cameras-cve-2024-8956-8957",
      "title": "PTZOptics PT30X-SDI/NDI Cameras: 2 actively exploited vulnerabilities",
      "url": "https://pwn.watch/i/ptzoptics-pt30x-sdi-ndi-cameras-cve-2024-8956-8957",
      "json": "https://pwn.watch/i/ptzoptics-pt30x-sdi-ndi-cameras-cve-2024-8956-8957.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "PTZOptics PT30X-SDI/NDI Cameras",
      "tags": [
        "ptzoptics",
        "ip-camera",
        "cisa-kev",
        "rce"
      ],
      "cveIds": [
        "CVE-2024-8956",
        "CVE-2024-8957"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-09-17",
      "closedAt": "2024-11-04",
      "updatedAt": "2024-11-04",
      "summary": "CVE-2024-8956: PTZOptics PT30X-SDI/NDI cameras contain an insecure direct object reference (IDOR) vulnerability that allows a remote, attacker to bypass authentication for the /cgi-bin/param.cgi CGI script. If combined with CVE-2024-8957, this can lead to remote code execution as root. CVE-2024-8957: PTZOptics PT30X-SDI/NDI cameras contain an OS command injection vulnerability that allows a remote, authenticated attacker to escalate privileges to root via a crafted payload with the ntp_addr parameter of the /cgi-bin/param.cgi CGI script. Added to the CISA KEV catalog on 2024-11-04.",
      "xPost": null
    },
    {
      "slug": "dahua-ip-camera-firmware-cve-2021-33044-33045",
      "title": "Dahua IP Camera Firmware: 2 actively exploited vulnerabilities",
      "url": "https://pwn.watch/i/dahua-ip-camera-firmware-cve-2021-33044-33045",
      "json": "https://pwn.watch/i/dahua-ip-camera-firmware-cve-2021-33044-33045.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Dahua IP Camera Firmware",
      "tags": [
        "dahua",
        "ip-camera",
        "cisa-kev",
        "auth-bypass"
      ],
      "cveIds": [
        "CVE-2021-33044",
        "CVE-2021-33045"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-08-21",
      "closedAt": "2024-08-21",
      "updatedAt": "2024-08-21",
      "summary": "CVE-2021-33044: Dahua IP cameras and related products contain an authentication bypass vulnerability when the NetKeyboard type argument is specified by the client during authentication. CVE-2021-33045: Dahua IP cameras and related products contain an authentication bypass vulnerability when the loopback device is specified by the client during authentication. Added to the CISA KEV catalog on 2024-08-21. CVE-2021-33044, CVE-2021-33045 were assigned before 2024; the KEV listing came in 2024.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "reolink-rlc-410w-ip-camera-cve-2021-40407",
      "incidentTitle": "Reolink RLC-410W IP Camera OS Command Injection",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "partial",
      "date": "2024-12-18",
      "title": "CISA added CVE-2021-40407 to the KEV catalog (federal deadline 2025-01-08)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/reolink-rlc-410w-ip-camera-cve-2021-40407"
    },
    {
      "incident": "reolink-multiple-ip-cameras-cve-2019-11001",
      "incidentTitle": "Reolink Multiple IP Cameras OS Command Injection",
      "severity": "high",
      "status": "closed",
      "patchStatus": "partial",
      "date": "2024-12-18",
      "title": "CISA added CVE-2019-11001 to the KEV catalog (federal deadline 2025-01-08)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/reolink-multiple-ip-cameras-cve-2019-11001"
    },
    {
      "incident": "ptzoptics-pt30x-sdi-ndi-cameras-cve-2024-8956-8957",
      "incidentTitle": "PTZOptics PT30X-SDI/NDI Cameras: 2 actively exploited vulnerabilities",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-11-04",
      "title": "CISA added CVE-2024-8956 to the KEV catalog (federal deadline 2024-11-25)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/ptzoptics-pt30x-sdi-ndi-cameras-cve-2024-8956-8957"
    },
    {
      "incident": "ptzoptics-pt30x-sdi-ndi-cameras-cve-2024-8956-8957",
      "incidentTitle": "PTZOptics PT30X-SDI/NDI Cameras: 2 actively exploited vulnerabilities",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-11-04",
      "title": "CISA added CVE-2024-8957 to the KEV catalog (federal deadline 2024-11-25)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/ptzoptics-pt30x-sdi-ndi-cameras-cve-2024-8956-8957"
    },
    {
      "incident": "ptzoptics-pt30x-sdi-ndi-cameras-cve-2024-8956-8957",
      "incidentTitle": "PTZOptics PT30X-SDI/NDI Cameras: 2 actively exploited vulnerabilities",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-09-17",
      "title": "CVE-2024-8956 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-8956",
      "url": "https://pwn.watch/i/ptzoptics-pt30x-sdi-ndi-cameras-cve-2024-8956-8957"
    },
    {
      "incident": "ptzoptics-pt30x-sdi-ndi-cameras-cve-2024-8956-8957",
      "incidentTitle": "PTZOptics PT30X-SDI/NDI Cameras: 2 actively exploited vulnerabilities",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-09-17",
      "title": "CVE-2024-8957 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-8957",
      "url": "https://pwn.watch/i/ptzoptics-pt30x-sdi-ndi-cameras-cve-2024-8956-8957"
    },
    {
      "incident": "dahua-ip-camera-firmware-cve-2021-33044-33045",
      "incidentTitle": "Dahua IP Camera Firmware: 2 actively exploited vulnerabilities",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-08-21",
      "title": "CISA added CVE-2021-33044 to the KEV catalog (federal deadline 2024-09-11)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/dahua-ip-camera-firmware-cve-2021-33044-33045"
    },
    {
      "incident": "dahua-ip-camera-firmware-cve-2021-33044-33045",
      "incidentTitle": "Dahua IP Camera Firmware: 2 actively exploited vulnerabilities",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-08-21",
      "title": "CISA added CVE-2021-33045 to the KEV catalog (federal deadline 2024-09-11)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/dahua-ip-camera-firmware-cve-2021-33044-33045"
    }
  ]
}