| タイトル | Intelbras MHDX 1004, MHDX 1008, MHDX 1016, MHDX 5016, HDCVI 1008, HDCVI 1016 N/A Exposure of Sensitive Information to an Unauthorized Actor |
|---|
| 説明 | The HTTP GET request to /cap.js on the server Intelbras DVR reveals several potentially sensitive pieces of information that are not properly protected or encrypted. The disclosed information includes device types, user information, streaming capabilities, network ports, and configurations which could be exploited by attackers to gain unauthorized access or conduct targeted attacks, affecting over 520,000 devices on the Internet. |
|---|
| ソース | ⚠️ https://github.com/netsecfish/intelbras_cap_js |
|---|
| ユーザー | netsecfish (UID 64568) |
|---|
| 送信 | 2024年03月27日 08:57 (2 年 ago) |
|---|
| モデレーション | 2024年04月01日 22:25 (6 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 258933 [Intelbras HDCVI 1016 迄 20240401 HTTP GET Request /cap.js 情報漏えい] |
|---|
| ポイント | 19 |
|---|