7.5

CVE-2013-1391

Exploit
Authentication bypass vulnerability in the the web interface in Hunt CCTV, Capture CCTV, Hachi CCTV, NoVus CCTV, and Well-Vision Inc DVR systems allows a remote attacker to retrieve the device configuration.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huntcctv ≫ Dvr-04ch Firmware Version -
   Huntcctv ≫ Dvr-04ch Version -
Huntcctv ≫ Dvr-04nc Firmware Version -
   Huntcctv ≫ Dvr-04nc Version -
Huntcctv ≫ Dvr-08ch Firmware Version -
   Huntcctv ≫ Dvr-08ch Version -
Huntcctv ≫ Dvr-08nc Firmware Version -
   Huntcctv ≫ Dvr-08nc Version -
Huntcctv ≫ Dvr-16ch Firmware Version -
   Huntcctv ≫ Dvr-16ch Version -
Huntcctv ≫ Dr6-704a4h Firmware Version -
   Huntcctv ≫ Dr6-704a4h Version -
Huntcctv ≫ Dr6-708a4h Firmware Version -
   Huntcctv ≫ Dr6-708a4h Version -
Huntcctv ≫ Dr6-7316a4h Firmware Version -
   Huntcctv ≫ Dr6-7316a4h Version -
Huntcctv ≫ Dr6-7316a4hl Firmware Version -
   Huntcctv ≫ Dr6-7316a4hl Version -
Huntcctv ≫ Hdr-04kd Firmware Version -
   Huntcctv ≫ Hdr-04kd Version -
Huntcctv ≫ Hdr-08kd Firmware Version -
   Huntcctv ≫ Hdr-08kd Version -
Capturecctv ≫ Cdr 0410ve Firmware Version -
   Capturecctv ≫ Cdr 0410ve Version -
Capturecctv ≫ Cdr 0820vde Firmware Version -
   Capturecctv ≫ Cdr 0820vde Version -
Hachi ≫ Hv-04rd Pro Firmware Version -
   Hachi ≫ Hv-04rd Pro Version -
Hachi ≫ Hv-08rd Pro Firmware Version -
   Hachi ≫ Hv-08rd Pro Version -
Novuscctv ≫ Nv-dvr1204 Firmware Version -
   Novuscctv ≫ Nv-dvr1204 Version -
Novuscctv ≫ Nv-dvr1208 Firmware Version -
   Novuscctv ≫ Nv-dvr1208 Version -
Novuscctv ≫ Nv-dvr1216 Firmware Version -
   Novuscctv ≫ Nv-dvr1216 Version -
Vsp ≫ Tw-dvr604 Firmware Version -
   Vsp ≫ Tw-dvr604 Version -
Vsp ≫ Tw-dvr616 Firmware Version -
   Vsp ≫ Tw-dvr616 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 76.11% 0.995
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://www.securitybydefault.com/2013/01/12000-grabadores-de-video-expuestos-en.html
Third Party Advisory
Exploit
https://www.rapid7.com/db/modules/auxiliary/scanner/misc/dvr_config_disclosure
Third Party Advisory
https://www.securityfocus.com/bid/57579/info
Third Party Advisory
Exploit
VDB Entry