CVE-2025-45619

The Aver PTC310UV2 camera running firmware v.0.1.0000.59 is vulnerable to arbitrary code execution via the SendAction function. Additionally, a secondary vulnerability exists where an open endpoint (https://[ipaddr]/action?get=acc) exposes valid administrator login credentials in plaintext. An at...

CVE-2025-45619

An issue in Aver PTC310UV2 firmware v.0.1.0000.59 allows a remote attacker to execute arbitrary code via the SendAction function...

CVE-2025-45620

An issue in Aver PTC310UV2 v.0.1.0000.59 allows a remote attacker to obtain sensitive information via a crafted request...

CVE-2025-45620: Exposure of Sensitive Information to an Unauthorized Actor

An issue in Aver PTC310UV2 v.0.1.0000.59 allows a remote attacker to obtain sensitive information via a crafted request...

CVE-2025-45620

An issue in Aver PTC310UV2 v.0.1.0000.59 allows a remote attacker to obtain sensitive information via a crafted request...

CVE-2023-27055

Aver Information Inc PTZApp2 v20.01044.48 allows attackers to access sensitive files via a crafted GET request...

CVE-2023-27055

Aver Information Inc PTZApp2 v20.01044.48 allows attackers to access sensitive files via a crafted GET request...

CVE-2023-27055

Aver Information Inc PTZApp2 v20.01044.48 allows attackers to access sensitive files via a crafted GET request...

Design/Logic Flaw

Aver Information Inc PTZApp2 v20.01044.48 allows attackers to access sensitive files via a crafted GET request...

CVE-2023-27055

Aver Information Inc PTZApp2 v20.01044.48 allows attackers to access sensitive files via a crafted GET request...

PT-2023-20919 · Aver Information · Ptzapp2

Name of the Vulnerable Software and Affected Versions: Aver Information Inc PTZApp2 version 20.01044.48 Description: The issue allows attackers to access sensitive files via a crafted GET request. Recommendations: For Aver Information Inc PTZApp2 version 20.01044.48, consider restricting access t...

CVE-2023-27055

Aver Information Inc PTZApp2 v20.01044.48 allows attackers to access sensitive files via a crafted GET request...

CVE-2023-27055: Improper Limitation of a Pathname to a Restricted Directory

Aver Information Inc PTZApp2 v20.01044.48 allows attackers to access sensitive files via a crafted GET request...

CVE-2023-27055

The CVE-2023-27055 issue affects Aver Information PTZApp2 prior to update 2.0.1051.53. Affected software exposes a directory traversal (path traversal) vulnerability in the web UI running on localhost, permitting an attacker to read sensitive files via a crafted GET request. Root cause is insuffi...

AVer Information: PTZApp path traversal vulnerability

AVer Information PTZApp is an innovative freeware with an upgrade interface from AVer Information China. It is used to control AVer USB cameras. A security vulnerability exists in AVer Information PTZApp version v20.01044.48. An attacker has exploited the vulnerability to access sensitive files v...

Aver EVC300 Firmware 00.10.16.36 Hardcoded Secrets Vulnerability

Aver EVC300 firmware version 00.10.16.36 suffers from having multiple hard-coded secrets that can allow for access bypass. Firmware for Aver EVC300 multipoint video conferencing system v00.10.16.36 and others as well as firmware for several other devices manufactured by Aver, potentially all...

Aver EVC300 Firmware 00.10.16.36 Hardcoded Secrets

Firmware for Aver EVC300 multipoint video conferencing system v00.10.16.36 and others as well as firmware for several other devices manufactured by Aver, potentially all multipoint video conferencing systems contains multiple advanced features that are not well documented: 1. The web admin server...

AVer Information EH6108H+ Authentication Bypass / Inforation Exposure

Vulnerability Note VU667480 AVer Information EH6108H+ hybrid DVR contains multiple vulnerabilities https://www.kb.cert.org/vuls/id/667480 Overview: AVer Information EH6108H+ hybrid DVR, version X9.03.24.00.07l and possibly earlier, reportedly contains multiple vulnerabilities, including...

CVE-2016-6537

AVer Information EH6108H+ devices with firmware X9.03.24.00.07l store passwords in a cleartext base64 format and require cleartext credentials in HTTP Cookie headers, which allows context-dependent attacks to obtain sensitive information by reading these strings...

CVE-2016-6537

AVer Information EH6108H+ devices with firmware X9.03.24.00.07l store passwords in a cleartext base64 format and require cleartext credentials in HTTP Cookie headers, which allows context-dependent attacks to obtain sensitive information by reading these strings...