CVE-2018-10770

CVE-2018-10770 affects ShenZhen Anni 5 in 1 XVR devices. The vulnerability is an information disclosure in the download.rsp flow that allows remote, unauthenticated retrieval of configuration data, including passwords. This is described across CNVD/EUVD/NVD records as an information-disclosure vu...

CVE-2018-10770

download.rsp on ShenZhen Anni "5 in 1 XVR" devices allows remote attackers to download the configuration without a login to discover the password...