Sensormatic Electronics VideoEdge

An attacker could execute malicious code on the VideoEdge admin interface when a user views it, potentially compromising the security camera system and allowing unauthorized surveillance or system manipulation.

Video surveillance operators and security administrators using Sensormatic VideoEdge systems, particularly those with network-connected admin interfaces. This affects municipalities, water authorities, utilities, and facilities that rely on IP-based video surveillance for physical security monitoring.

An attacker crafts malicious code and tricks a user into viewing it through the VideoEdge admin GUI (likely via social engineering or a network-based attack). When the admin interface renders the attacker's code, it executes in the admin's browser context with their permissions, allowing the attacker to perform actions as that administrator.