Lucene search
+L

1162 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/23 12:00 a.m.•4 views

CVE-2024-22768: Improper Input Validation

Improper Input Validation in Hitron Systems DVR HVR-4781 1.034.02 allows an attacker to cause network attack in case of using defalut admin ID/PW...

7.5CVSS7.4AI score0.00562EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/01/23 12:00 a.m.•21 views

Hitron Systems DVR Security Vulnerability

Hitron Systems DVR is a digital video recorder from Hitron Systems, a South Korean company. A security vulnerability exists in Hitron Systems DVR LGUVR-4H versions 1.02 through 4.02, which stems from incorrect input validation. An attacker could exploit the vulnerability to trigger a cyber attack...

7.5CVSS6.7AI score0.00496EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/01/23 12:00 a.m.•19 views

Hitron Systems DVR HVR-16781 Security Vulnerability

Hitron Systems DVR is a digital video recorder from Hitron Systems, a South Korean company. A security vulnerability exists in Hitron Systems DVR HVR-16781 versions 1.03 through 4.02, which stems from incorrect input validation. An attacker could exploit the vulnerability to trigger a cyber attac...

7.5CVSS6.7AI score0.00496EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/01/22 12:00 a.m.•29 views

PT-2024-1194

Name of the Vulnerable Software and Affected Versions Hitron Systems DVR HVR-4781 versions 1.03 through 4.02 Description The issue is related to the use of default credentials in the Hitron Systems DVR HVR-4781, which can be exploited by a remote attacker to cause a denial of service by utilizing...

7.5CVSS6.8AI score0.00562EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2024/01/22 12:00 a.m.•22 views

PT-2024-19556

Name of the Vulnerable Software and Affected Versions Hitron Systems DVR HVR-16781 versions 1.03 through 4.02 Description The issue is related to improper input validation, which allows an attacker to cause a network attack when using the default admin ID and password. Recommendations For version...

7.5CVSS7.6AI score0.00496EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2024/01/22 12:00 a.m.•22 views

PT-2024-19557

Name of the Vulnerable Software and Affected Versions Hitron Systems DVR LGUVR-8H versions 1.02 through 4.02 Description The issue is related to improper input validation, which can allow an attacker to cause a network attack if the default admin ID and password are used. Recommendations For...

7.5CVSS7.7AI score0.00496EPSS
SaveExploits0References7
NVD
NVD
•added 2023/12/13 3:15 a.m.•51 views

CVE-2023-45801

Improper Authentication vulnerability in Nadatel DVR allows Information Elicitation.This issue affects DVR: from 3.0.0 before 9.9.0...

7.5CVSS0.00722EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/13 3:15 a.m.•29 views

Authentication flaw

Improper Authentication vulnerability in Nadatel DVR allows Information Elicitation.This issue affects DVR: from 3.0.0 before 9.9.0...

5CVSS7.2AI score0.00722EPSS
SaveExploits0References1Affected Software18
CVE
CVE
•added 2023/12/13 2:05 a.m.•74 views

CVE-2023-45801

CVE-2023-45801 affects Nadatel DVR devices, specifically versions 3.0.0 through 9.9.0. The root cause is improper authentication, which enables information elicitation (confidentiality impact). The vulnerability is network‑accessible with low attack complexity and no user interaction required, an...

7.5CVSS7.5AI score0.00722EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/12/13 2:05 a.m.•54 views

CVE-2023-45801

Improper Authentication vulnerability in Nadatel DVR allows Information Elicitation.This issue affects DVR: from 3.0.0 before 9.9.0...

7.5CVSS7.8AI score0.00722EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/12/12 12:00 a.m.•23 views

PT-2023-29695 · Unknown · Nadatel Dvr

Name of the Vulnerable Software and Affected Versions: Nadatel DVR versions 3.0.0 through 9.9.0 Description: The issue is related to an Improper Authentication vulnerability, which allows Information Elicitation. This vulnerability affects Nadatel DVR devices, potentially allowing unauthorized...

7.5CVSS7.3AI score0.00722EPSS
SaveExploits0References6
NVD
NVD
•added 2023/11/23 7:15 a.m.•43 views

CVE-2023-28811

There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on the same local area network LAN could cause the device to malfunction by sending specially crafted packets to an unpatched device...

7.4CVSS0.00394EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/23 7:15 a.m.•43 views

Buffer overflow

There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on the same local area network LAN could cause the device to malfunction by sending specially crafted packets to an unpatched device...

3.3CVSS7.6AI score0.00394EPSS
SaveExploits0References1Affected Software40
Cvelist
Cvelist
•added 2023/11/23 6:42 a.m.•46 views

CVE-2023-28811

There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on the same local area network LAN could cause the device to malfunction by sending specially crafted packets to an unpatched device...

7.4CVSS7.8AI score0.00394EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/23 6:42 a.m.•143 views

CVE-2023-28811

CVE-2023-28811 affects Hikvision NVR/DVR devices; a buffer overflow in the password recovery feature can be triggered by specially crafted LAN packets to an unpatched device, potentially causing malfunction. Documented impact is availability loss; root cause is a buffer overflow in password recov...

7.4CVSS6.7AI score0.00394EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/23 12:00 a.m.•8 views

CVE-2023-28811: Buffer Copy without Checking Size of Input

There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on the same local area network LAN could cause the device to malfunction by sending specially crafted packets to an unpatched device...

7.4CVSS7AI score0.00394EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2023/08/24 7:15 a.m.•26 views

CVE-2023-3704

The vulnerability exists in CP-Plus DVR due to an improper input validation within the web-based management interface of the affected products. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful...

5.3CVSS5.8AI score0.00686EPSS
SaveExploits0References1
NVD
NVD
•added 2023/08/24 7:15 a.m.•48 views

CVE-2023-3704

The vulnerability exists in CP-Plus DVR due to an improper input validation within the web-based management interface of the affected products. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful...

5.3CVSS5.3AI score0.00686EPSS
SaveExploits0References1
Prion
Prion
•added 2023/08/24 7:15 a.m.•50 views

Input validation

The vulnerability exists in CP-Plus DVR due to an improper input validation within the web-based management interface of the affected products. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful...

5CVSS5.3AI score0.00686EPSS
SaveExploits0References1Affected Software9
CVE
CVE
•added 2023/08/24 6:42 a.m.•89 views

CVE-2023-3704

CVE-2023-3704 affects CP-Plus DVR; vulnerability stems from improper input validation in the web-based management interface. An unauthenticated remote attacker can trigger the issue by sending specially crafted HTTP requests to the affected device, potentially allowing the attacker to change the ...

5.3CVSS5.3AI score0.00686EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder