EUVD-2018-2840

Malware in sbrugna...

Default credentials

download.rsp on ShenZhen Anni "5 in 1 XVR" devices allows remote attackers to download the configuration without a login to discover the password...

CVE-2018-10770

download.rsp on ShenZhen Anni "5 in 1 XVR" devices allows remote attackers to download the configuration without a login to discover the password...

CVE-2018-10770

CVE-2018-10770 affects ShenZhen Anni 5 in 1 XVR devices. The vulnerability is an information disclosure in the download.rsp flow that allows remote, unauthenticated retrieval of configuration data, including passwords. This is described across CNVD/EUVD/NVD records as an information-disclosure vu...

CVE-2018-10770

download.rsp on ShenZhen Anni "5 in 1 XVR" devices allows remote attackers to download the configuration without a login to discover the password...

CVE-2018-10770: Exposure of Sensitive Information to an Unauthorized Actor

download.rsp on ShenZhen Anni "5 in 1 XVR" devices allows remote attackers to download the configuration without a login to discover the password...