An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. Authenticated attackers with the «Operator» Privilege can gain admin privileges via a crafted request to ‘/goform/formUserMng’.
