CVE-2020-11682

Summary: Castel NextGen DVR v1.0.0 is vulnerable to CSRF in all state-changing requests because a __RequestVerificationToken set by the web interface is not verified by the application, allowing removal of the token and successful requests. Affected component: Castel NextGen DVR web interface (v1...

CVE-2020-11681

Castel NextGen DVR v1.0.0 stores and displays credentials for the SMTP server in cleartext. This enables a low-privileged user to create an administrator account and obtain SMTP credentials. The root cause, per the CVE details, is cleartext credential handling. Some sources note the issue was add...

CVE-2020-11680

Castel NextGen DVR v1.0.0 is affected by an authorization bypass vulnerability where requests are not checked for admin privileges, enabling a normal user to perform admin actions such as creating/modifying the file store, alerts, and users. Root cause: missing admin verification on administrator...

CVE-2020-11679

Castel NextGen DVR v1.0.0 is vulnerable to privilege escalation via Adminstrator/Users/Edit/:UserId, where requests aren’t checked for admin authority, enabling a normal user to add roles and gain administrator privileges. The issue is fixed in v1.0.1 per linked disclosures; CVSS data in sources ...