Nvs-365-V01 Firmware Security Vulnerabilities

CVE-2022-47070

NVS365 V01 is vulnerable to Incorrect Access Control. After entering a wrong password, the url will be sent to the server twice. In the second package, the server will return the correct password information.

CVE-2022-47071

In NVS365 V01, the background network test function can trigger command execution.