Описание
An improper certificate validation vulnerability exists in AVTECH IP cameras, DVRs, and NVRs due to the use of wget with --no-check-certificate in scripts like SyncCloudAccount.sh and SyncPermit.sh. This exposes HTTPS communications to man-in-the-middle (MITM) attacks.
Ссылки
EPSS
Процентиль: 16%
0.00052
Низкий
Дефекты
CWE-295
Связанные уязвимости
github
7 месяцев назад
An improper certificate validation vulnerability exists in AVTECH IP cameras, DVRs, and NVRs due to the use of wget with --no-check-certificate in scripts like SyncCloudAccount.sh and SyncPermit.sh. This exposes HTTPS communications to man-in-the-middle (MITM) attacks.
EPSS
Процентиль: 16%
0.00052
Низкий
Дефекты
CWE-295