PT-2017-6762 · Kguard · Kguard Digital Video Recorder

Publicado 2017-08-18 · Atualizado 2018-10-09 · CVE-2015-4464

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Kguard Digital Video Recorder versions 104, 108, v2

Description The issue concerns the lack of authorization or authentication between an ActiveX client and the application server.

Recommendations For versions 104, 108, and v2, consider implementing proper authentication mechanisms between the ActiveX client and the application server to mitigate the risk of unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2015-4464

Produtos afetados

Kguard Digital Video Recorder

Referências · 5

• 🔥 https://academia.edu/11677554/Kguard_Digital_Video_Recorders_Multiple_Vulnerabilities · Exploit
• 🔥 http://packetstormsecurity.com/files/132437/Kguard-Digital-Video-Recorder-Bypass-Issues.html · Exploit
• http://securityfocus.com/archive/1/535822/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-4464 · Nota de Segurança
• http://securityfocus.com/bid/73032 · Nota