CVE-2022-28861

CVE-2022-28861 is a medium-severity vulnerability affecting Citilog 8.0 and Axis M1125 smart cameras, where an attacker in a man-in-the-middle position can intercept cleartext FTP credentials. This allows for unauthorized FTP access to the server. The attack requires high complexity due to the man-in-the-middle prerequisite but can lead to high confidentiality impact. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.