Submeter #305410: Intelbras MHDX 1004, MHDX 1008, MHDX 1016, MHDX 5016, HDCVI 1008, HDCVI 1016 N/A Exposure of Sensitive Information to an Unauthorized Actorinformação

TítuloIntelbras MHDX 1004, MHDX 1008, MHDX 1016, MHDX 5016, HDCVI 1008, HDCVI 1016 N/A Exposure of Sensitive Information to an Unauthorized Actor
DescriçãoThe HTTP GET request to /cap.js on the server Intelbras DVR reveals several potentially sensitive pieces of information that are not properly protected or encrypted. The disclosed information includes device types, user information, streaming capabilities, network ports, and configurations which could be exploited by attackers to gain unauthorized access or conduct targeted attacks, affecting over 520,000 devices on the Internet.
Fonte⚠️ https://github.com/netsecfish/intelbras_cap_js
Utilizador netsecfish (UID 64568)
Submissão27/03/2024 08h57 (há 2 anos)
Moderação01/04/2024 22h25 (6 days later)
EstadoAceite
Entrada VulDB258933 [Intelbras HDCVI 1016 até 20240401 HTTP GET Request /cap.js Divulgação de Informação]
Pontos19

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!