Описание
A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0). The two FTP services (default ports 21/tcp and 5411/tcp) of the SiVMS/SiNVR Video Server contain a path traversal vulnerability that could allow an authenticated remote attacker to access and download arbitrary files from the server, if the FTP services are enabled.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Одно из
EPSS
6.8 Medium
CVSS3
8.1 High
CVSS3
4.9 Medium
CVSS2
Дефекты
Связанные уязвимости
A vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR 3 Video Server (all versions). The two FTP services (default ports 21/tcp and 5411/tcp) of the SiNVR 3 Video Server contain a path traversal vulnerability that could allow an authenticated remote attacker to access and download arbitrary files from the server, if the FTP services are enabled.
Уязвимость службы FTP (порты по умолчанию 21/tcp и 5411/tcp) видеосервера SiNVR 3, позволяющая нарушителю получить доступ к защищаемой информации
EPSS
6.8 Medium
CVSS3
8.1 High
CVSS3
4.9 Medium
CVSS2