CVE-2020-7057

creationtimestamp| type| source ---|---|--- 2020-07-24 00:46:10+00:00| seen| https://t.me/VulnerabilityNews/16044 2020-07-24 00:55:20+00:00| seen| https://t.me/cibsecurity/13640...

CVE-2020-7057

Hikvision DVR DS-7204HGHI-F1 V4.0.1 build 180903 Web Version sends a different response for failed ISAPI/Security/sessionLogin/capabilities login attempts depending on whether the user account exists, which might make it easier to enumerate users. However, only about 4 or 5 failed logins are...

CVE-2020-7057

CVE-2020-7057 affects Hikvision DVR DS-7204HGHI-F1 running V4.0.1 build 180903 web interface. The login endpoint ISAPI/Security/sessionLogin/capabilities returns different responses for failed login attempts based on whether the username exists, enabling user enumeration. The description states o...