5 matches found
EUVD-2018-2840
Malware in sbrugna...
9.8CVSS9.5AI score0.01596EPSS
SaveExploits1References3
Default credentials
download.rsp on ShenZhen Anni "5 in 1 XVR" devices allows remote attackers to download the configuration without a login to discover the password...
5CVSS9.3AI score0.01596EPSS
SaveExploits1References2
CVE-2018-10770
download.rsp on ShenZhen Anni "5 in 1 XVR" devices allows remote attackers to download the configuration without a login to discover the password...
9.8CVSS9.4AI score0.01596EPSS
SaveExploits1References2
CVE-2018-10770
CVE-2018-10770 affects ShenZhen Anni 5 in 1 XVR devices. The vulnerability is an information disclosure in the download.rsp flow that allows remote, unauthenticated retrieval of configuration data, including passwords. This is described across CNVD/EUVD/NVD records as an information-disclosure vu...
9.8CVSS9.3AI score0.01596EPSS
SaveExploits1References2Affected Software1
20