Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2xrj-wrq4-ff74

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

A vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR 3 Video Server (all versions). The streaming service (default port 5410/tcp) of the SiNVR 3 Video Server applies weak cryptography when exposing device (camera) passwords. This could allow an unauthenticated remote attacker to read and decrypt the passwords and conduct further attacks.

A vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR 3 Video Server (all versions). The streaming service (default port 5410/tcp) of the SiNVR 3 Video Server applies weak cryptography when exposing device (camera) passwords. This could allow an unauthenticated remote attacker to read and decrypt the passwords and conduct further attacks.

EPSS

Процентиль: 64%
0.0046
Низкий

7.5 High

CVSS3

Дефекты

CWE-326
CWE-327

Связанные уязвимости

CVSS3: 7.5
nvd
почти 6 лет назад

A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0), SiNVR/SiVMS Video Server (All versions >= V5.0.0 < V5.0.2), SiNVR/SiVMS Video Server (All versions >= V5.0.2). The streaming service (default port 5410/tcp) of the SiVMS/SiNVR Video Server applies weak cryptography when exposing device (camera) passwords. This could allow an unauthenticated remote attacker to read and decrypt the passwords and conduct further attacks.

CVSS3: 7.5
fstec
почти 6 лет назад

Уязвимость службы потоковой передачи (порт по умолчанию 5410/tcp) видеосервера SiNVR 3, позволяющая нарушителю получить доступ к защищаемой информации

EPSS

Процентиль: 64%
0.0046
Низкий

7.5 High

CVSS3

Дефекты

CWE-326
CWE-327