Authenticated admin escalation via user-controlled key

Authorization bypass in Honeywell S35 Series Cameras allows remote authenticated users to gain administrative functionality via a user key. The user controller accepts an attacker-controlled key without confirming that the requesting account may access the referenced administrative functions. A valid low-privilege account and additional attack-specific conditions are required; exploitation exposes and permits changes to admin-protected data or functions.