The vulnerability of the Machine.cgi?action=get_capability component of the Avtech microprogrammed software for IP cameras and digital/network video recorders allows a intruder to gain unauthorized access to confidential information.

The vulnerability of the Machine.cgi?action=getcapability component of Avtech’s microprogrammed IP cameras and digital/netscreen video recorders lies in the lack of authentication for critical functions. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...