PT-2023-29695 · Unknown · Nadatel Dvr

CVE-2023-45801 · Publicado 2023-12-12 · Atualizado 2023-12-15

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Nadatel DVR versions 3.0.0 through 9.9.0

Description The issue is related to an Improper Authentication vulnerability, which allows Information Elicitation. This vulnerability affects Nadatel DVR devices, potentially allowing unauthorized access to sensitive information.

Recommendations For Nadatel DVR versions 3.0.0 through 9.9.0, update to a version 9.9.0 or later to resolve the issue. At the moment, there is no information about other specific mitigation measures for this vulnerability.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2023-45801

Produtos afetados

Nadatel Dvr

Referências · 7

• https://twitter.com/CVEnew/status/1734764344624497094 · Publicação no Twitter
• https://t.me/cvenotify/63776 · Publicação no Telegram
• http://nadatel.com · Nota
• https://t.me/cvenotify/63441 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-45801 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-45801 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1734822492139585986 · Publicação no Twitter