| 标题 | Intelbras MHDX 1004, MHDX 1008, MHDX 1016, MHDX 5016, HDCVI 1008, HDCVI 1016 N/A Exposure of Sensitive Information to an Unauthorized Actor |
|---|
| 描述 | The HTTP GET request to /cap.js on the server Intelbras DVR reveals several potentially sensitive pieces of information that are not properly protected or encrypted. The disclosed information includes device types, user information, streaming capabilities, network ports, and configurations which could be exploited by attackers to gain unauthorized access or conduct targeted attacks, affecting over 520,000 devices on the Internet. |
|---|
| 来源 | ⚠️ https://github.com/netsecfish/intelbras_cap_js |
|---|
| 用户 | netsecfish (UID 64568) |
|---|
| 提交 | 2024-03-27 08時57分 (3 年前) |
|---|
| 管理 | 2024-04-01 22時25分 (6 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 258933 [Intelbras HDCVI 1016 直到 20240401 HTTP GET Request /cap.js 信息公开] |
|---|
| 积分 | 19 |
|---|