PT-2025-26953 · Hunt Electronic · Hunt Electronic Hybrid Dvr
An-Wei Kung
+4
·
Publicado
2025-06-26
·
Atualizado
2025-07-01
·
CVE-2025-6561
CVSS v2.0
10
Crítica
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Hunt Electronic Hybrid DVR models (HBF-09KD and HBF-16NK)
Description:
The issue allows unauthenticated remote attackers to directly access a system configuration file and obtain plaintext administrator credentials. This is an Exposure of Sensitive Information vulnerability.
Recommendations:
For HBF-09KD and HBF-16NK models, consider restricting access to the system configuration file until a patch is available.
As a temporary workaround, avoid using plaintext administrator credentials in the affected system until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Hunt Electronic Hybrid Dvr