| タイトル | Faraday Technology(Grain-Media) DVR GM828x, GM8181 Exposure of Sensitive System Information to an Unauthorized Cont |
|---|
| 説明 | The Faraday Technology (Grain-Media) DVRs are affected by a security vulnerability that allows unauthorized disclosure of sensitive information. This is due to the exposure of the command_port.ini file over an unprotected HTTP channel. An attacker could exploit this vulnerability to engage in further unauthorized activities, such as accessing DVR (detailed in Submit #324403), affecting over 27,000 Internet-connected devices. |
|---|
| ソース | ⚠️ https://netsecfish.notion.site/Information-Disclosure-in-Faraday-Technology-Grain-Media-GM828x-GM8181-DVR-via-Unauthenticated-Acc-3d184791c8d7405ba9d6a49e7a5bd918?pvs=4 |
|---|
| ユーザー | netsecfishfish (UID 68318) |
|---|
| 送信 | 2024年04月29日 14:42 (2 年 ago) |
|---|
| モデレーション | 2024年05月07日 06:57 (8 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 263306 [Faraday GM8181/GM828x 迄 20240429 /command_port.ini 情報漏えい] |
|---|
| ポイント | 17 |
|---|