A password disclosure vulnerability exists in Dahua IP Camera, which allows unauthenticated user to access sensitive device information including the admin passwords. An attacker could send a certain crafted HTTP request and acquire the credentials necessary for controlling the camera.
