CVE-2020-23826

HIGH 8.8CVE-2020-23826 · Published 26/01/2021 · updated 17/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

The Yale WIPC-303W 2.21 through 2.31 camera is vulnerable to remote command execution (RCE) through command injection via the HTTP API. NOTE: This may be a duplicate of CVE-2020-10176

References

firedome.io/blog/firedome-discloses-0-day-vulnerabilities-in-yale-ip-cameras · Third Party Advisory
lp.firedome.io/hubfs/Yale%20WIPC-301W%20RCE%20Vulnerability%20Report%205-6.pdf · Exploit
whiterosezex.blogspot.com/2021/01/cve-2020-23826-rce-vulnerability-in.html · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free