What’s Vulnerable › Vulnerabilities

CVE-2020-37146: Aptina AR0130 960P 1.3MP Camera - Remote Configuration Disclosure

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-07 · updated 2026-06-17
• Weakness: CWE-306

Description

ACE Security WiP-90113 HD Camera contains a configuration disclosure vulnerability that allows unauthenticated attackers to retrieve sensitive configuration files. Attackers can access the camera's configuration backup by sending a GET request to the /config_backup.bin endpoint, exposing credentials and system settings.

Affected products

• ACE SECURITY Aptina AR0130 960P 1.3MP Camera: all versions

References

• https://acesecurity.jp
• https://acesecurity.jp/support/top/wip_series/wip-90113
• https://www.exploit-db.com/exploits/48127
• https://www.vulncheck.com/advisories/aptina-ar-p-mp-camera-remote-configuration-disclosure

Get alerted when CVE-2020-37146 or the next vulnerability affects your stack