The ARD-9808 DVR card security camera stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing usernames and passwords via a direct request for dvr.ini.
Max CVSS
7.5
EPSS Score
0.88%
Published
2009-07-02
Updated
2017-09-19
The ARD-9808 DVR card security camera allows remote attackers to cause a denial of service via a long URI composed of //.\ (slash slash dot backslash) sequences.
Max CVSS
7.8
EPSS Score
1.00%
Published
2009-07-02
Updated
2017-09-19
2 vulnerabilities found