PT-2023-25770 · Unknown · Cp-Plus Dvr

Arko Dhar + 1 · Publicado 2023-08-24 · Atualizado 2026-01-05 · CVE-2023-3704

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions CP-Plus DVR (affected versions not specified)

Description The issue exists due to improper input validation within the web-based management interface. An unauthenticated remote attacker could exploit this by sending specially crafted HTTP requests to the vulnerable device, potentially allowing them to change the system time of the targeted device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2023-3704

Produtos afetados

Cp-Plus Dvr

Referências · 4

• https://osv.dev/vulnerability/CVE-2023-3704 · Aviso do Fabricante
• https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0240 · Aviso do Fabricante
• https://twitter.com/grok/status/2008126671006687602 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-3704 · Nota de Segurança