You do not have permission to edit this page, for the following reasons:
The Uniview IPC2124SR3-APF40 is a 4MP mini fixed bullet network camera from the Uniview Prime series, part of the broader IPC21 family. Its most serious documented weakness is CVE-2021-45039 (CVSS 9.8), an unauthenticated buffer overflow in an undocumented UDP service on port 7788 that affects the IPC21/IPC23/IPC32/IPC36/IPC62 lines and allows remote code execution and ultimately a telnetd login with hardcoded root/123456 credentials. CVE-2023-0773 additionally describes an authentication failure in the Uniview IP-camera web management interface, though its recorded CPE names a different model. Uniview operates a vulnerability-response programme and issued an advisory for the port 7788 flaw, yet the camera line has no automatic firmware update path, so a large share of deployed units are likely unpatched. The device is therefore rated D: remote pre-authentication compromise is documented and the default credential path defeats the user-authentication controls that remain. Values for hardware tampering, storage encryption, account management and event logging are provisional because no model-level public documentation could be retrieved.
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
