Описание
An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd web server. The strstr() function allows unauthenticated access to any request containing "/nobody" in the URL, bypassing login controls.
Ссылки
EPSS
Процентиль: 45%
0.0056
Низкий
Дефекты
CWE-290
Связанные уязвимости
github
около 1 года назад
An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd web server. The strstr() function allows unauthenticated access to any request containing "/nobody" in the URL, bypassing login controls.
EPSS
Процентиль: 45%
0.0056
Низкий
Дефекты
CWE-290