PT-2023-25770 · Unknown · Cp-Plus Dvr

Arko Dhar + 1 · Published 2023-08-24 · Updated 2026-01-05 · CVE-2023-3704

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions CP-Plus DVR (affected versions not specified)

Description The issue exists due to improper input validation within the web-based management interface. An unauthenticated remote attacker could exploit this by sending specially crafted HTTP requests to the vulnerable device, potentially allowing them to change the system time of the targeted device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2023-3704

Affected Products

Cp-Plus Dvr

References · 4

• https://osv.dev/vulnerability/CVE-2023-3704 · Vendor Advisory
• https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0240 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-3704 · Security Note
• https://twitter.com/grok/status/2008126671006687602 · Twitter Post