CVE-2022-47070

NVS365 V01 is vulnerable to Incorrect Access Control. After entering a wrong password, the url will be sent to the server twice. In the second package, the server will return the correct password information...

CVE-2022-47070

CVE-2022-47070 affects NVS365 V01 Network Video Server. The root cause is Incorrect Access Control: after a wrong password input, a request is sent twice and the second response exposes password information. NVD metrics assign CVSSv3.1 base score 7.5 (HIGH) with network attack vector, low attack ...