CVE-2019-11064

🗓️ 29 Aug 2019 00:19:17Reported by twcertType

cve🔗 web.nvd.nist.gov👁 169 Views🌐 WEB

A vulnerability in Advan VD-1 firmware allows remote credential disclosure

Reporter	Title	Published	Views	Family All 6
CNVD	AndroVideo Advan VD-1 Trust Management Issues Vulnerability	29 Aug 201900:00	–	cnvd
Cvelist	CVE-2019-11064 A vulnerability of remote credential disclosure was discovered in Advan VD-1	29 Aug 201900:19	–	cvelist
EUVD	EUVD-2019-2772	7 Oct 202500:30	–	euvd
NVD	CVE-2019-11064	29 Aug 201901:15	–	nvd
Prion	Authentication flaw	29 Aug 201901:15	–	prion
Tenable Nessus	GeoVision GV-VR360 and GV-VD8700 Improper Authentication (CVE-2019-11064)	19 Nov 202400:00	–	nessus

NVD

Vulners

Node

androvideo vd_1_firmwareRange≤230

AND

androvideo vd_1Match-

Node

geovision gv-vr360_firmwareRange≤1.10

AND

geovision gv-vr360Match-

Node

geovision gv-vd8700_firmwareRange≤1.01

AND

geovision gv-vd8700Match-

[
  {
    "product": "Advan VD-1 firmware",
    "vendor": "AndroVideo",
    "versions": [
      {
        "status": "affected",
        "version": "up to 230"
      }
    ]
  }
]

Source	Link
surl	www.surl.twcert.org.tw/gCDQN
tvn	www.tvn.twcert.org.tw/taiwanvn/TVN-201906005
gist	www.gist.github.com/keniver/f5155b42eb278ec0273b83565b64235b

Parameter	Position	Path	Description	CWE
Export	query param	cgibin/ExportSettings.cgi	Unauthenticated export of system configuration leading to credential disclosure via ExportSettings.cgi?Export=1	CWE-287, CWE-200

21 Nov 2024 04:20Current

9.4High risk

Vulners AI Score9.4

CVSS 25

CVSS 3.19.8

EPSS0.00458