PT-2009-3285 · Swann · Swann Dvr4-/Securanet

Published 2009-02-18 · Updated 2018-10-10 · CVE-2009-0644

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Swann DVR4-SecuraNet (affected versions not specified)

Description The issue concerns the HTTP interface in the software, which has a default administrative username and password. This default credential setup makes it easier for remote attackers to gain privileged access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2009-0644

Affected Products

Swann Dvr4-/Securanet

References · 3

• 🔥 http://packetstorm.linuxsecurity.com/0902-exploits/cctv-disclose.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-0644 · Security Note
• http://securityfocus.com/archive/1/500789/100/0/threaded · Note