| Título | Provision-ISR SH-4050A-2, SH-4100A-2L(MM), SH-8100A-2L(MM), SH-16200A-2(1U), SH-16200A-5(1U) , NVR5-8200PX 1.2.6.0R0.B180303h.1.D00.U2(4A21S), 1.2.6.0R0.B180303h.1.D00.U2(4A21T), 1.2.6.0R0.B180303h.1.N0K.U2(8A218), 1.2.6.0R0.B180303h.1 Information Disclos |
|---|
| Descripción | A security vulnerability has been identified in multiple Provision-ISR DVR devices including SH-4050A-2, SH-4100A-2L(MM) and SH-8100A-2L(MM). This vulnerability allows unauthorized disclosure of sensitive device information due to insufficient access controls on the device's web server. An attacker could exploit this vulnerability to engage in further unauthorized activities, affecting over 182,000 devices on the Internet. |
|---|
| Fuente | ⚠️ https://netsecfish.notion.site/Sensitive-Device-Information-Disclosure-in-Provision-ISR-DVR-1626b683e67c803881befbc730a93bf6?pvs=4 |
|---|
| Usuario | netsecfish (UID 64568) |
|---|
| Sumisión | 2024-12-20 13:05 (hace 2 años) |
|---|
| Moderación | 2025-01-04 09:57 (15 days later) |
|---|
| Estado | Aceptado |
|---|
| Entrada de VulDB | 290203 [Provision-ISR SH-4050A-2 hasta 20241220 /server.js divulgación de información] |
|---|
| Puntos | 16 |
|---|