| 标题 | Provision-ISR SH-4050A-2, SH-4100A-2L(MM), SH-8100A-2L(MM), SH-16200A-2(1U), SH-16200A-5(1U) , NVR5-8200PX 1.2.6.0R0.B180303h.1.D00.U2(4A21S), 1.2.6.0R0.B180303h.1.D00.U2(4A21T), 1.2.6.0R0.B180303h.1.N0K.U2(8A218), 1.2.6.0R0.B180303h.1 Information Disclos |
|---|
| 描述 | A security vulnerability has been identified in multiple Provision-ISR DVR devices including SH-4050A-2, SH-4100A-2L(MM) and SH-8100A-2L(MM). This vulnerability allows unauthorized disclosure of sensitive device information due to insufficient access controls on the device's web server. An attacker could exploit this vulnerability to engage in further unauthorized activities, affecting over 182,000 devices on the Internet. |
|---|
| 来源 | ⚠️ https://netsecfish.notion.site/Sensitive-Device-Information-Disclosure-in-Provision-ISR-DVR-1626b683e67c803881befbc730a93bf6?pvs=4 |
|---|
| 用户 | netsecfish (UID 64568) |
|---|
| 提交 | 2024-12-20 13時05分 (2 年前) |
|---|
| 管理 | 2025-01-04 09時57分 (15 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 290203 [Provision-ISR SH-4050A-2 直到 20241220 /server.js 信息公开] |
|---|
| 积分 | 16 |
|---|