Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5q84-q9g2-g3jr

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.8

Описание

A vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR 3 Video Server (all versions). The two FTP services (default ports 21/tcp and 5411/tcp) of the SiNVR 3 Video Server contain a path traversal vulnerability that could allow an authenticated remote attacker to access and download arbitrary files from the server, if the FTP services are enabled.

A vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR 3 Video Server (all versions). The two FTP services (default ports 21/tcp and 5411/tcp) of the SiNVR 3 Video Server contain a path traversal vulnerability that could allow an authenticated remote attacker to access and download arbitrary files from the server, if the FTP services are enabled.

EPSS

Процентиль: 60%
0.00396
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 6.8
nvd
почти 6 лет назад

A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0). The two FTP services (default ports 21/tcp and 5411/tcp) of the SiVMS/SiNVR Video Server contain a path traversal vulnerability that could allow an authenticated remote attacker to access and download arbitrary files from the server, if the FTP services are enabled.

CVSS3: 8.1
fstec
почти 6 лет назад

Уязвимость службы FTP (порты по умолчанию 21/tcp и 5411/tcp) видеосервера SiNVR 3, позволяющая нарушителю получить доступ к защищаемой информации

EPSS

Процентиль: 60%
0.00396
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-22