Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-31594 — IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control | Kitploit
Tools/GitHubGitHub/yozarseef95/cve-2023-31594
ReconnaissanceIoT SecurityVulnerability AnalysisExploitationWeb SecurityHardware Security
GitHubyozarseef95/cve-2023-31594

CVE-2023-31594

IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control

View Repository
1103 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2023-31594

IC Realtime ICIP-P2012T is vulnerable to Incorrect Access Control

Unauthenticated Streaming Channel in IC Realtime IP PTZ Dome Camera ICIP-P2012 software version: 2.420

The live feed (MJPEG) can be streamed via an exposed HTTP channel using VLC network stream. This vulnerability critically affects confidentiality of customers and could be used in reconnaissance phase (identify people, assets, passwords etc.).

Proof of Concept (POC)

If HTTP streaming is allowed, a URL path could be used to allow user to MJPEG stream camera without any required authentication.

The path: http://ip:port/cgi-bin/mjpg/video.cgi?[channel=1]&subtype=1

image

[Discoverer]

Youssef Mohamed - Cloud Consultancy for Digitalization & Security

Download Tool