PT-2020-12769 · Castel · Castel Nextgen Dvr

Published 2020-06-04 · Updated 2020-06-10 · CVE-2020-11681

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Castel NextGen DVR version 1.0.0

Description The issue allows low-privileged users to exploit the fact that credentials for the associated SMTP server are stored and displayed in cleartext. This can be used to create an administrator user and obtain the SMTP credentials.

Recommendations For Castel NextGen DVR version 1.0.0, consider restricting access to the SMTP server configuration to prevent low-privileged users from exploiting the cleartext credentials. As a temporary workaround, limit the creation of new administrator users until a fix is available.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2020-11681

Affected Products

Castel Nextgen Dvr

References · 6

• https://osv.dev/vulnerability/CVE-2020-11681 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-11681 · Security Note
• http://packetstormsecurity.com/files/157954/Castel-NextGen-DVR-1.0.0-Bypass-CSRF-Disclosure.html · Note
• http://seclists.org/fulldisclosure/2020/Jun/8 · Note
• https://securitymetrics.com/blog/attackers-known-unknown-authorization-bypass · Note
• https://t.me/cybersecuritytechnologies/1230 · Telegram Post