CVE:CVE-2018-16225
CNNVD:CNNVD-201809-797
Askey QBee MultiSensor Camera是Askey Computer公司的一款智能照相机产品。
Askey QBee MultiSensor Camera 4.16.4及之前版本中存在安全漏洞。攻击者可利用该漏洞重用cookies，进而绕过身份验证并禁用相机。
solution:Upgrade qbeecam qbee_multi-sensor_camera_firmware to a higher version than 4.16.4,and avoid the version (,4.16.4]; Upgrade qbeecam qbeecam to a higher version than 1.0.5,and avoid the version (,1.0.5]; Upgrade swisscom swisscom_home_app to a higher version than 10.7.2,and avoid the version (,10.7.2]