Multiple vulnerabilities found in Wireless IP Camera (P2P) WIFICAM cameras and vulnerabilities in custom http server TL;DR: by analysing the security of a camera, I found a pre-auth RCE as root against 1250 camera models. Shodan lists 185 000 vulnerable cameras. The "Cloud" protocol establishes clear-text UDP tunnels (in order to bypass NAT and firewalls) between an attacker and cameras by using o
![Multiple vulnerabilities found in Wireless IP Camera (P2P) WIFICAM cameras and vulnerabilities in custom http server - IT Security Research by Pierre](https://cdn-ak-scissors.b.st-hatena.com/image/square/ad50d737cc5e54e4991006d4375236ff1a8d5249/height=288;version=1;width=512/https%3A%2F%2Fpierrekim.github.io%2Fblog%2Fimages%2F2017-cam-system-camera.png)