CVE-2007-6638

The CVE affects March Networks DVR 3204. The issue is improper access control in the web root that allows remote attackers to directly access scripts/logfiles.tar.gz, exposing usernames, passwords, device names, and IP addresses. The vulnerability is described with a CVSS base score of 10.0 (HIGH...