Beward N100 H.264 VGA IP Camera M2.1.6 Authenticated File Disclosure
41Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendcvss 7.1epss 19%
probabilidade de exploração
19%top 3% das CVEs
exploração observada
nãonenhuma fonte reporta
Beward N100 H.264 VGA IP Camera M2.1.6 contains an authenticated file disclosure vulnerability that allows attackers to read arbitrary system files via the 'READ.filePath' parameter. Attackers can exploit the fileread script or SendCGICMD API to access sensitive files like /etc/passwd and /etc/issue by supplying absolute file paths.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Beward R&D Co., Ltd · N100 H.264 VGA IP Camera