high7.5Public exploit code
CVE-2013-1391
Authentication bypass vulnerability in the the web interface in Hunt CCTV, Capture CCTV, Hachi CCTV, NoVus CCTV, and Well-Vision Inc DVR systems allows a remot…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Multiple Hunt CCTV - Information Disclosure2013-01-29 · remote · multiple · Verified
Impact
Authentication bypass vulnerability in the the web interface in Hunt CCTV, Capture CCTV, Hachi CCTV, NoVus CCTV, and Well-Vision Inc DVR systems allows a remote attacker to retrieve the device configuration.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huntcctv | Dvr-04ch Firmware | All versions |
| Huntcctv | Dvr-04nc Firmware | All versions |
| Huntcctv | Dvr-08ch Firmware | All versions |
| Huntcctv | Dvr-08nc Firmware | All versions |
| Huntcctv | Dvr-16ch Firmware | All versions |
| Huntcctv | Dr6-704a4h Firmware | All versions |
| Huntcctv | Dr6-708a4h Firmware | All versions |
| Huntcctv | Dr6-7316a4h Firmware | All versions |
| Huntcctv | Dr6-7316a4hl Firmware | All versions |
| Huntcctv | Hdr-04kd Firmware | All versions |
| Huntcctv | Hdr-08kd Firmware | All versions |
| Capturecctv | Cdr 0410ve Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securitybydefault.com/2013/01/12000-grabadores-de-video-expuestos-en.html
- https://www.rapid7.com/db/modules/auxiliary/scanner/misc/dvr_config_disclosure
- https://www.securityfocus.com/bid/57579/info
- http://www.securitybydefault.com/2013/01/12000-grabadores-de-video-expuestos-en.html
- https://www.rapid7.com/db/modules/auxiliary/scanner/misc/dvr_config_disclosure
- https://www.securityfocus.com/bid/57579/info