CVE:CVE-2019-3948
CNNVD:CNNVD-201907-1485
Amcrest IP2M-841B是Amcrest公司的一款IP摄像机。
使用2.520.AC00.18.R版本固件的Amcrest IP2M-841B中存在授权问题漏洞，该漏洞在访问HTTP端点/视频通话时，程序没有要求进行身份验证。远程攻击者可利用该漏洞连接到该端点并监听摄像头所录制的音频。
solution:Upgrade amcrest ip2m-841b_firmware to a higher version than 2.520.ac00.18.r,and avoid the version 2.520.ac00.18.r; Upgrade dahua dh-ipc-hx863x to a higher version than 2018-05-18,and avoid the version (,2018-05-18); Upgrade dahua dh-ipc-hx883x to a higher version than 2018-05-18,and avoid the version (,2018-05-18); Upgrade dahua dh-sd4xxxxx to a higher version than 2018-05-18,and avoid the version (,2018-05-18); Upgrade dahua dh-sd5xxxxx to a higher version than 2018-05-18,and avoid the version (,2018-05-18); Upgrade dahua dh-sd6xxxxx to a higher version than 2018-05-18,and avoid the version (,2018-05-18); Upgrade dahua ipc-hx4x3x to a higher version than 2018-05-18,and avoid the version (,2018-05-18); Upgrade dahua ipc-hx5x3x to a higher version than 2018-05-18,and avoid the version (,2018-05-18); Upgrade dahua ipc-xxbxx to a higher version than 2018-05-18,and avoid the version (,2018-05-18); Upgrade dahua nvr2xxx-4ks2 to a higher version than 2018-05-18,and avoid the version (,2018-05-18); Upgrade dahua nvr4xxx-4ks2 to a higher version than 2018-05-18,and avoid the version (,2018-05-18); Upgrade dahua nvr5xxx-4ks2 to a higher version than 2018-05-18,and avoid the version (,2018-05-18)