Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mhh9-mp84-mg88

Опубликовано: 08 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 5.1
CVSS3: 2.7

Описание

A vulnerability was found in Vivotek NVR ND8422P, NVR ND9525P and NVR ND9541P 2.4.0.204/3.3.0.104/4.2.0.101. It has been classified as problematic. Affected is an unknown function of the component HTML Form Handler. The manipulation leads to inclusion of sensitive information in source code. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in Vivotek NVR ND8422P, NVR ND9525P and NVR ND9541P 2.4.0.204/3.3.0.104/4.2.0.101. It has been classified as problematic. Affected is an unknown function of the component HTML Form Handler. The manipulation leads to inclusion of sensitive information in source code. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

EPSS

Процентиль: 44%
0.00217
Низкий

5.1 Medium

CVSS4

2.7 Low

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 2.7
nvd
10 месяцев назад

A vulnerability was found in Vivotek NVR ND8422P, NVR ND9525P and NVR ND9541P 2.4.0.204/3.3.0.104/4.2.0.101. It has been classified as problematic. Affected is an unknown function of the component HTML Form Handler. The manipulation leads to inclusion of sensitive information in source code. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

EPSS

Процентиль: 44%
0.00217
Низкий

5.1 Medium

CVSS4

2.7 Low

CVSS3

Дефекты

CWE-200