PT-2022-17045 · Unknown · Argus Surveillance Dvr

Published 2022-03-01 · Updated 2022-03-09 · CVE-2022-25012

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Argus Surveillance DVR version 4.0

Description The issue concerns weak password encryption.

Recommendations For Argus Surveillance DVR version 4.0, update the password encryption mechanism to a stronger one to mitigate the risk.

Exploit

Fix

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

Related Identifiers

CVE-2022-25012

Affected Products

Argus Surveillance Dvr

References · 6

• 🔥 https://github.com/s3l33/CVE-2022-25012 · Exploit
• 🔥 https://leobreaker1411.github.io/blog/dvr4-hash-crack · Exploit
• 🔥 https://exploit-db.com/exploits/50130 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-25012 · Security Note
• https://osv.dev/vulnerability/CVE-2022-25012 · Vendor Advisory
• https://t.me/cvenotify/27578 · Telegram Post