PT-2017-6762 · Kguard · Kguard Digital Video Recorder

Published 2017-08-18 · Updated 2018-10-09 · CVE-2015-4464

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Kguard Digital Video Recorder versions 104, 108, v2

Description The issue concerns the lack of authorization or authentication between an ActiveX client and the application server.

Recommendations For versions 104, 108, and v2, consider implementing proper authentication mechanisms between the ActiveX client and the application server to mitigate the risk of unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2015-4464

Affected Products

Kguard Digital Video Recorder

References · 5

• 🔥 https://academia.edu/11677554/Kguard_Digital_Video_Recorders_Multiple_Vulnerabilities · Exploit
• 🔥 http://packetstormsecurity.com/files/132437/Kguard-Digital-Video-Recorder-Bypass-Issues.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-4464 · Security Note
• http://securityfocus.com/archive/1/535822/100/0/threaded · Note
• http://securityfocus.com/bid/73032 · Note