CVE-2019-11064 A vulnerability of remote credential disclosure was discovered in Advan VD-1

2019-08-2000:00:00

CWE-200

twcert

www.cve.org

9.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.1%

JSON

A vulnerability of remote credential disclosure was discovered in Advan VD-1 firmware versions up to 230. An attacker can export system configuration which is not encrypted to get the administrator’s account and password in plain text via cgibin/ExportSettings.cgi?Export=1 without any authentication.

CNA Affected

[
  {
    "product": "Advan VD-1 firmware",
    "vendor": "AndroVideo",
    "versions": [
      {
        "status": "affected",
        "version": "up to 230"
      }
    ]
  }
]