Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-3912 State: PUBLISHED Published: 2019-01-30T20:00:00Z Last Updated: 2024-09-17T01:12:23.512Z Vendors: Tenable Products: LabKey Server Community Edition Problem Types: CWE-601 Description: An open redirect vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 via the /__r1/ returnURL parameter allows an unauthenticated remote attacker to redirect users to arbitrary web sites. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-03
CVE ID: CVE-2019-3913 State: PUBLISHED Published: 2019-01-30T20:00:00Z Last Updated: 2024-09-17T04:14:42.674Z Vendors: Tenable Products: LabKey Server Community Edition Problem Types: CWE-77 Description: Command manipulation in LabKey Server Community Edition before 18.3.0-61806.763 allows an authenticated remote attacker to unmount any drive on the system leading to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-03
CVE ID: CVE-2019-3914 State: PUBLISHED Published: 2019-04-11T13:53:37 Last Updated: 2024-08-04T19:26:27.491Z Vendors: Verizon Products: Fios Quantum Gateway (G1100) Problem Types: Authenticated Command Injection Description: Remote command injection vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows a remote, authenticated attacker to execute arbitrary commands on the target device by adding an access control rule for a network object with a crafted hostname. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-17
CVE ID: CVE-2019-3915 State: PUBLISHED Published: 2019-04-11T13:59:46 Last Updated: 2024-08-04T19:26:27.754Z Vendors: Verizon Products: Fios Quantum Gateway (G1100) Problem Types: Login Replay Description: Authentication Bypass by Capture-replay vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows an unauthenticated attacker with adjacent network access to intercept and replay login requests to gain access to the administrative web interface. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-17 - http://www.securityfocus.com/bid/107883
CVE ID: CVE-2019-3916 State: PUBLISHED Published: 2019-04-11T14:12:44 Last Updated: 2024-08-04T19:26:27.582Z Vendors: Verizon Products: Fios Quantum Gateway (G1100) Problem Types: Password Salt Information Disclosure Description: Information disclosure vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows an remote, unauthenticated attacker to retrieve the value of the password salt by simply requesting an API URL in a web browser (e.g. /api). Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-17
CVE ID: CVE-2019-3917 State: PUBLISHED Published: 2019-03-05T21:00:00Z Last Updated: 2024-09-16T16:14:15.165Z Vendors: Tenable Products: Alcatel Lucent I-240W-Q GPON ONT Problem Types: CWE-306 Description: The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 allows a remote, unauthenticated attacker to enable telnetd on the router via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-09
CVE ID: CVE-2019-3918 State: PUBLISHED Published: 2019-03-05T21:00:00Z Last Updated: 2024-09-16T22:25:15.845Z Vendors: Tenable Products: Alcatel Lucent I-240W-Q GPON ONT Problem Types: CWE-798 Description: The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 contains multiple hard coded credentials for the Telnet and SSH interfaces. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-09
CVE ID: CVE-2019-3919 State: PUBLISHED Published: 2019-03-05T21:00:00Z Last Updated: 2024-09-16T22:51:22.049Z Vendors: Tenable Products: Alcatel Lucent I-240W-Q GPON ONT Problem Types: CWE-78 Description: The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to command injection via crafted HTTP request sent by a remote, authenticated attacker to /GponForm/usb_restore_Form?script/. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-09
CVE ID: CVE-2019-3920 State: PUBLISHED Published: 2019-03-05T21:00:00Z Last Updated: 2024-09-17T02:32:47.046Z Vendors: Tenable Products: Alcatel Lucent I-240W-Q GPON ONT Problem Types: CWE-78 Description: The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to authenticated command injection via crafted HTTP request sent by a remote, authenticated attacker to /GponForm/device_Form?script/. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-09
CVE ID: CVE-2019-3921 State: PUBLISHED Published: 2019-03-05T21:00:00Z Last Updated: 2024-09-17T04:19:39.718Z Vendors: Tenable Products: Alcatel Lucent I-240W-Q GPON ONT Problem Types: CWE-121 Description: The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent by a remote, authenticated attacker to /GponForm/usb_Form?script/. An attacker can leverage this vulnerability to potentially execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-09 - https://www.exploit-db.com/exploits/46469/
CVE ID: CVE-2019-3922 State: PUBLISHED Published: 2019-03-05T21:00:00Z Last Updated: 2024-09-16T17:07:38.284Z Vendors: Tenable Products: Alcatel Lucent I-240W-Q GPON ONT Problem Types: CWE-121 Description: The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent by a remote, unauthenticated attacker to /GponForm/fsetup_Form. An attacker can leverage this vulnerability to potentially execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-09
CVE ID: CVE-2019-3923 State: PUBLISHED Published: 2019-02-12T04:00:00Z Last Updated: 2024-09-17T02:10:57.993Z Vendors: Tenable Products: Tenable Nessus Problem Types: Local Privilege Escalation Description: Nessus versions 8.2.1 and earlier were found to contain a stored XSS vulnerability due to improper validation of user-supplied input. An authenticated, remote attacker could potentially exploit this vulnerability via a specially crafted request to execute arbitrary script code in a user's browser session. Tenable has released Nessus 8.2.2 to address this issue. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2019-01
CVE ID: CVE-2019-3924 State: PUBLISHED Published: 2019-02-20T20:00:00Z Last Updated: 2024-09-17T02:46:52.071Z Vendors: Tenable Products: MikroTik RouterOS Problem Types: CWE-441 Description: MikroTik RouterOS before 6.43.12 (stable) and 6.42.12 (long-term) is vulnerable to an intermediary vulnerability. The software will execute user defined network requests to both WAN and LAN clients. A remote unauthenticated attacker can use this vulnerability to bypass the router's firewall or for general network scanning activities. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46444/ - https://www.tenable.com/security/research/tra-2019-07 - http://
ferences: - https://www.exploit-db.com/exploits/46444/ - https://www.tenable.com/security/research/tra-2019-07 - http://www.securityfocus.com/bid/107177
CVE ID: CVE-2019-3925 State: PUBLISHED Published: 2019-04-30T20:09:51 Last Updated: 2024-08-04T19:26:26.699Z Vendors: Crestron Products: Crestron AirMedia Problem Types: CWE-79 Description: Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.100.3.2.9.3. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-20
CVE ID: CVE-2019-3926 State: PUBLISHED Published: 2019-04-30T20:12:46 Last Updated: 2024-08-04T19:26:27.268Z Vendors: Crestron Products: Crestron AirMedia Problem Types: CWE-79 Description: Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.100.3.2.14.1. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-20
CVE ID: CVE-2019-3927 State: PUBLISHED Published: 2019-04-30T20:15:32 Last Updated: 2024-08-04T19:26:27.355Z Vendors: Crestron Products: Crestron AirMedia Problem Types: CWE-284 Description: Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 anyone can change the administrator and moderator passwords via the iso.3.6.1.4.1.3212.100.3.2.8.1 and iso.3.6.1.4.1.3212.100.3.2.8.2 OIDs. A remote, unauthenticated attacker can use this vulnerability to change the admin or moderator user's password and gain access to restricted areas on the HTTP interface. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-20
CVE ID: CVE-2019-3928 State: PUBLISHED Published: 2019-04-30T20:18:34 Last Updated: 2024-08-04T19:26:27.641Z Vendors: Crestron Products: Crestron AirMedia Problem Types: CWE-284 Description: Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allow any user to obtain the presentation passcode via the iso.3.6.1.4.1.3212.100.3.2.7.4 OIDs. A remote, unauthenticated attacker can use this vulnerability to access a restricted presentation or to become the presenter. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-20
CVE ID: CVE-2019-3929 State: PUBLISHED Published: 2019-04-30T20:21:09.000Z Last Updated: 2025-10-21T23:45:38.287Z Vendors: Crestron Products: Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT WIPS710, SHARP PN-L703WA, Optoma WPS-Pro, Blackbox HD WPS, InFocus LiteShow3, and InFocus LiteShow4. Problem Types: CWE-79 Description: The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus
re 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/research/tra-2019-20 - https://www.exploit-db.com/exploits/46786/ - http://packetstormsecurity.com/files/152715/Barco-AWIND-OEM-Presentation-Platform-Unauthenticated-Remote-Command-Injection.html - http://packetsto
.com/files/152715/Barco-AWIND-OEM-Presentation-Platform-Unauthenticated-Remote-Command-Injection.html - http://packetstormsecurity.com/files/155948/Barco-WePresent-file_transfer.cgi-Command-Injection.html
CVE ID: CVE-2019-3930 State: PUBLISHED Published: 2019-04-30T20:25:56 Last Updated: 2024-08-04T19:26:27.743Z Vendors: Crestron Products: Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT WIPS710, SHARP PN-L703WA, Optoma WPS-Pro, Blackbox HD WPS, InFocus LiteShow3, and InFocus LiteShow4. Problem Types: CWE-121 Description: The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus Lit
.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to a stack buffer overflow in libAwgCgi.so's PARSERtoCHAR function. A remote, unauthenticated attacker can use this vulnerability to execute arbitrary code as root via a crafted request to the return.cgi endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-20
CVE ID: CVE-2019-3931 State: PUBLISHED Published: 2019-04-30T20:28:44 Last Updated: 2024-08-04T19:26:27.568Z Vendors: Crestron Products: Crestron AirMedia Problem Types: CWE-88 Description: Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to argumention injection to the curl binary via crafted HTTP requests to return.cgi. A remote, authenticated attacker can use this vulnerability to upload files to the device and ultimately execute code as root. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-20
CVE ID: CVE-2019-3932 State: PUBLISHED Published: 2019-04-30T20:30:02 Last Updated: 2024-08-04T19:26:27.558Z Vendors: Crestron Products: Crestron AirMedia Problem Types: CWE-249 Description: Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to authentication bypass due to a hard-coded password in return.tgi. A remote, unauthenticated attacker can use this vulnerability to control external devices via the uart_bridge. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-20
CVE ID: CVE-2019-3933 State: PUBLISHED Published: 2019-04-30T20:30:50 Last Updated: 2024-08-04T19:26:27.523Z Vendors: Crestron Products: Crestron AirMedia Problem Types: CWE-284 Description: Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to bypass the presentation code simply by requesting /images/browserslide.jpg via HTTP. A remote, unauthenticated attacker can use this vulnerability to watch a slideshow without knowing the access code. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-20
CVE ID: CVE-2019-3934 State: PUBLISHED Published: 2019-04-30T20:34:03 Last Updated: 2024-08-04T19:26:27.453Z Vendors: Crestron Products: Crestron AirMedia Problem Types: CWE-284 Description: Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to bypass the presentation code sending a crafted HTTP POST request to login.cgi. A remote, unauthenticated attacker can use this vulnerability to download the current slide image without knowing the access code. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-20
CVE ID: CVE-2019-3935 State: PUBLISHED Published: 2019-04-30T20:34:51 Last Updated: 2024-08-04T19:26:27.786Z Vendors: Crestron Products: Crestron AirMedia Problem Types: CWE-284 Description: Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to act as a moderator to a slide show via crafted HTTP POST requests to conference.cgi. A remote, unauthenticated attacker can use this vulnerability to start, stop, and disconnect active slideshows. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-20
CVE ID: CVE-2019-3936 State: PUBLISHED Published: 2019-04-30T20:35:48 Last Updated: 2024-08-04T19:26:27.921Z Vendors: Crestron Products: Crestron AirMedia Problem Types: CWE-284 Description: Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 is vulnerable to denial of service via a crafted request to TCP port 389. The request will force the slideshow to transition into a "stopped" state. A remote, unauthenticated attacker can use this vulnerability to stop an active slideshow. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-20
CVE ID: CVE-2019-3937 State: PUBLISHED Published: 2019-04-30T20:38:24 Last Updated: 2024-08-04T19:26:27.781Z Vendors: Crestron Products: Crestron AirMedia Problem Types: CWE-312 Description: Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 stores usernames, passwords, slideshow passcode, and other configuration options in cleartext in the file /tmp/scfgdndf. A local attacker can use this vulnerability to recover sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-20
CVE ID: CVE-2019-3938 State: PUBLISHED Published: 2019-04-30T20:39:24 Last Updated: 2024-08-04T19:26:27.938Z Vendors: Crestron Products: Crestron AirMedia Problem Types: CWE-522 Description: Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 stores usernames, passwords, and other configuration options in the file generated via the "export configuration" feature. The configuration file is encrypted using the awenc binary. The same binary can be used to decrypt any configuration file since all the encryption logic is hard coded. A local attacker can use this vulnerability to gain access to devices username and passwords. Additional Analyst Notes: - CVE Program Container: Re
is vulnerability to gain access to devices username and passwords. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-20
CVE ID: CVE-2019-3939 State: PUBLISHED Published: 2019-04-30T20:40:18 Last Updated: 2024-08-04T19:26:27.803Z Vendors: Crestron Products: Crestron AirMedia Problem Types: CWE-16 Description: Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 use default credentials admin/admin and moderator/moderator for the web interface. An unauthenticated, remote attacker can use these credentials to gain privileged access to the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-20
CVE ID: CVE-2019-3940 State: PUBLISHED Published: 2019-04-09T15:05:01 Last Updated: 2024-08-04T19:26:27.481Z Vendors: Advantech Products: WebAccess Problem Types: CWE-434 Description: Advantech WebAccess 8.3.4 is vulnerable to file upload attacks via unauthenticated RPC call. An unauthenticated, remote attacker can use this vulnerability to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-15 - http://www.securityfocus.com/bid/107847
CVE ID: CVE-2019-3941 State: PUBLISHED Published: 2019-04-09T15:06:37 Last Updated: 2024-08-04T19:26:27.534Z Vendors: Advantech Products: WebAccess Problem Types: Unrestrived File Deletion Description: Advantech WebAccess 8.3.4 allows unauthenticated, remote attackers to delete arbitrary files via IOCTL 10005 RPC. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-15 - http://www.securityfocus.com/bid/107847
CVE ID: CVE-2019-3942 State: PUBLISHED Published: 2020-04-01T16:04:29 Last Updated: 2024-08-04T19:26:27.802Z Vendors: n/a Products: Advantech WebAccess Problem Types: CWE-284 Description: Advantech WebAccess 8.3.4 does not properly restrict an RPC call that allows unauthenticated, remote users to read files. An attacker can use this vulnerability to recover the administrator password. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-15
CVE ID: CVE-2019-3943 State: PUBLISHED Published: 2019-04-10T20:01:00 Last Updated: 2024-08-04T19:26:27.694Z Vendors: MikroTik Products: RouterOS Problem Types: CWE-23 Description: MikroTik RouterOS versions Stable 6.43.12 and below, Long-term 6.42.12 and below, and Testing 6.44beta75 and below are vulnerable to an authenticated, remote directory traversal via the HTTP or Winbox interfaces. An authenticated, remote attack can use this vulnerability to read and write files outside of the sandbox directory (/rw/disk). Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-16
CVE ID: CVE-2019-3944 State: PUBLISHED Published: 2020-04-01T16:07:39 Last Updated: 2024-08-04T19:26:27.948Z Vendors: n/a Products: Parrot ANAFI Problem Types: Denial of Service Description: Parrot ANAFI is vulnerable to Wi-Fi deauthentication attack, allowing remote and unauthenticated attackers to disconnect drone from controller during mid-flight. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-22
CVE ID: CVE-2019-3945 State: PUBLISHED Published: 2020-04-01T16:07:36 Last Updated: 2024-08-04T19:26:27.618Z Vendors: n/a Products: Parrot ANAFI Problem Types: Denial of Service Description: Web server running on Parrot ANAFI can be crashed due to the SDK command "Common_CurrentDateTime" being sent to control service with larger than expected date length. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-22
CVE ID: CVE-2019-3946 State: PUBLISHED Published: 2019-06-12T14:06:52 Last Updated: 2024-08-04T19:26:27.278Z Vendors: n/a Products: Fuji Electric V-Server Problem Types: Denial of Service Description: Fuji Electric V-Server before 6.0.33.0 is vulnerable to denial of service via a crafted UDP message sent to port 8005. An unauthenticated, remote attacker can crash vserver.exe due to an integer overflow in the UDP message handling logic. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-27 - http://www.securityfocus.com/bid/108740
CVE ID: CVE-2019-3947 State: PUBLISHED Published: 2019-06-12T14:06:57 Last Updated: 2024-08-04T19:26:27.750Z Vendors: n/a Products: Fuji Electric V-Server Problem Types: Plaintext storage of credentials Description: Fuji Electric V-Server before 6.0.33.0 stores database credentials in project files as plaintext. An attacker that can gain access to the project file can recover the database credentials and gain access to the database server. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-27 - http://www.securityfocus.com/bid/108740
CVE ID: CVE-2019-3948 State: PUBLISHED Published: 2019-07-29T21:47:27 Last Updated: 2024-08-04T19:26:27.619Z Vendors: n/a Products: Dahua IPC-XXBXX, Dahua IPC HX5X3X and HX4X3X, Dahua DH-IPC HX883X and DH-IPC-HX863X, Dahua DH-SD4XXXXX, Dahua DH-SD5XXXXX, Dahua DH-SD6XXXXX, Dahua NVR5XX-4KS2, Dahua NVR4XXX-4KS2 Problem Types: CWE 285 - Improper Access Control (Authorization) Description: The Amcrest IP2M-841B V2.520.AC00.18.R, Dahua IPC-XXBXX V2.622.0000000.9.R, Dahua IPC HX5X3X and HX4X3X V2.800.0000008.0.R, Dahua DH-IPC HX883X and DH-IPC-HX863X V2.622.0000000.7.R, Dahua DH-SD4XXXXX V2.623.0000000.7.R, Dahua DH-SD5XXXXX V2.623.0000000.1.R, Dahua DH-SD6XXXXX V2.640.0000000.2.R and V2.623.0000
-SD4XXXXX V2.623.0000000.7.R, Dahua DH-SD5XXXXX V2.623.0000000.1.R, Dahua DH-SD6XXXXX V2.640.0000000.2.R and V2.623.0000000.1.R, Dahua NVR5XX-4KS2 V3.216.0000006.0.R, Dahua NVR4XXX-4KS2 V3.216.0000006.0.R, and NVR2XXX-4KS2 do not require authentication to access the HTTP endpoint /videotalk. An unauthenticated, remote person can connect to this endpoint and potentionally listen to the audio of the capturing device. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-36 - http://packetstormsecurity.com/files/153813/Amcrest-Cameras-2.520.AC00.18.R-Unauthenticated-Audio-Streaming.html - https://us.dahuasecurity.com/wp-content/uploa