Vulnerabilities > Guardzilla > 180 Outdoor

DATE CVE VULNERABILITY TITLE RISK
2018-12-31 CVE-2018-18602 Use of Insufficiently Random Values vulnerability in Guardzilla products
The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access and monitoring.
network
low complexity
guardzilla CWE-330
5.0
5.0
2018-12-31 CVE-2018-18600 OS Command Injection vulnerability in Guardzilla 180 Indoor Firmware and 180 Outdoor Firmware
The remote upgrade feature in Guardzilla GZ180 devices allow command injection via a crafted new firmware version parameter.
network
guardzilla CWE-78
critical
 9.3
9.3