BaseFortify

Publication date: 2025-11-26

Last updated on: 2025-11-26

Assigner: VulnCheck

Description

ESCAM QD-900 WIFI HD cameras contain an unauthenticated configuration disclosure vulnerability in the /web/cgi-bin/hi3510/backup.cgi endpoint. The endpoint allows remote download of a compressed configuration backup without requiring authentication or authorization. The exposed backup can include administrative credentials and other sensitive device settings, enabling an unauthenticated remote attacker to obtain information that may facilitate further compromise of the camera or connected network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-26

Last Modified

2025-11-26

Generated

2026-07-06

AI Q&A

2025-11-27

EPSS Evaluated

2026-07-05

NVD

CVE-2020-36871

Affected Vendors & Products

Vendor	Product	Version / Range
escam	qd-900	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

Executive Summary

This vulnerability exists in ESCAM QD-900 WIFI HD cameras where the /web/cgi-bin/hi3510/backup.cgi endpoint allows anyone to remotely download a compressed configuration backup without needing to authenticate. This backup can contain administrative credentials and sensitive device settings, enabling an unauthenticated attacker to gain information that could lead to further compromise of the camera or the connected network.

Impact Analysis

An attacker can exploit this vulnerability to obtain administrative credentials and sensitive configuration data from the camera without any authentication. This can lead to unauthorized access, control over the camera, and potentially further compromise of the connected network, risking privacy and security.

Hi! I’m here to help you understand CVE-2020-36871. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70