CVE-2023-3705

The vulnerability exists in CP-Plus NVR due to an improper input handling at the web-based management interface of the affected product. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful exploitation...

Input validation

The vulnerability exists in CP-Plus NVR due to an improper input handling at the web-based management interface of the affected product. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful exploitation...

CVE-2023-3704

The vulnerability exists in CP-Plus DVR due to an improper input validation within the web-based management interface of the affected products. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful...

CVE-2023-3704

The vulnerability exists in CP-Plus DVR due to an improper input validation within the web-based management interface of the affected products. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful...

Input validation

The vulnerability exists in CP-Plus DVR due to an improper input validation within the web-based management interface of the affected products. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful...

CVE-2023-3705 Information Disclosure Vulnerability in CP-Plus Network Video Recorder

The vulnerability exists in CP-Plus NVR due to an improper input handling at the web-based management interface of the affected product. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful exploitation...

CVE-2023-3705 Information Disclosure Vulnerability in CP-Plus Network Video Recorder

The vulnerability exists in CP-Plus NVR due to an improper input handling at the web-based management interface of the affected product. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful exploitation...

CVE-2023-3705

CVE-2023-3705 affects CP-Plus NVR and is caused by improper input handling in the web-based management interface. An unauthenticated remote attacker can send specially crafted HTTP requests to the vulnerable device, potentially exposing sensitive information. The vulnerability is rated HIGH (CVSS...

CVE-2023-3704

CVE-2023-3704 affects CP-Plus DVR; vulnerability stems from improper input validation in the web-based management interface. An unauthenticated remote attacker can trigger the issue by sending specially crafted HTTP requests to the affected device, potentially allowing the attacker to change the ...

CVE-2023-3704 Timestamp Modification Vulnerability in CP-Plus Digital Video Recorder

The vulnerability exists in CP-Plus DVR due to an improper input validation within the web-based management interface of the affected products. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful...

CP-Plus DVR 输入验证错误漏洞

CP-Plus DVR is a digital video recorder from CP-Plus. A security vulnerability exists in CP-Plus DVR that stems from incorrect input validation, which allows an unauthenticated, remote attacker to change the system time of a target device by sending a specially crafted HTTP request to the...

CP-Plus DVR 安全漏洞

CP-Plus DVR is a digital video recorder from CP-Plus. A security vulnerability exists in CP-Plus DVR that stems from improper input handling, which allows an unauthenticated, remote attacker to obtain sensitive information on a target device by sending a specially crafted HTTP request to the...

CP Plus KVMS Pro

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: CP Plus Equipment: KVMS Pro Vulnerability: Insufficiently Protected Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to retrieve sensitive credentials and control the...

CVE-2023-1518

CP Plus KVMS Pro versions 2.01.0.T.190521 and prior are vulnerable to sensitive credentials being leaked because they are insufficiently protected...

Code injection

CP Plus KVMS Pro versions 2.01.0.T.190521 and prior are vulnerable to sensitive credentials being leaked because they are insufficiently protected...

CVE-2023-1518

CP Plus KVMS Pro versions 2.01.0.T.190521 and prior are vulnerable to sensitive credentials being leaked because they are insufficiently protected...

CVE-2023-1518

CP Plus KVMS Pro versions 2.01.0.T.190521 and prior are vulnerable to sensitive credentials being leaked because they are insufficiently protected...

CVE-2023-1518

CVE-2023-1518 affects CP Plus KVMS Pro, specifically versions 2.01.0.T.190521 and earlier. The vulnerability is described as insufficiently protected credentials, leading to leakage of sensitive credentials and potential control over the CCTV system. According to the ICS advisory, exploitation is...

PT-2023-17048 · Cp Plus · Cp Plus Kvms Pro

Name of the Vulnerable Software and Affected Versions: CP Plus KVMS Pro versions 2.01.0.T.190521 and prior Description: The issue concerns the leakage of sensitive credentials due to insufficient protection. Recommendations: For CP Plus KVMS Pro versions 2.01.0.T.190521 and prior, update to a...

CP Plus KVMS Pro 安全漏洞

CP Plus KVMS Pro is a virtual machine software from CP Plus. A security vulnerability exists in CP Plus KVMS Pro version V2.01.0.T.190521 and prior versions. An attacker exploited the vulnerability to cause sensitive credentials to be disclosed...