Details of VAR-201312-0540

ID

VAR-201312-0540

TITLE

EcoSense Digital Video Recorder 'live.shtml' Remote Authentication Bypass Vulnerability

Trust: 0.9

sources: CNVD: CNVD-2014-00120 // BID: 64645

DESCRIPTION

EcoSense Digital Video Recorder (DVR) is a digital hard disk video recorder from Dedicated Micros, USA. A remote authentication bypass vulnerability exists in EcoSense DVR. An attacker could use this vulnerability to bypass the authentication mechanism and gain access to view video streams

Trust: 1.35

sources: CNVD: CNVD-2014-00120 // CNNVD: CNNVD-201401-059 // BID: 64645

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2014-00120

AFFECTED PRODUCTS

vendor:	dedicated micros usa	model:	ecosense digital video recorder	scope:	-	version:	-	Trust: 0.6
vendor:	dedicated	model:	micros usa inc ecosense digital video recorder	scope:	eq	version:	0	Trust: 0.3

sources: CNVD: CNVD-2014-00120 // BID: 64645

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2014-00120
value:	MEDIUM
Trust: 0.6

CNVD:	CNVD-2014-00120
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	8.6
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

sources: CNVD: CNVD-2014-00120

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201401-059

TYPE

permissions and access control

Trust: 0.6

sources: CNNVD: CNNVD-201401-059

EXTERNAL IDS

db:	BID	id:	64645	Trust: 1.5
db:	CNVD	id:	CNVD-2014-00120	Trust: 0.6
db:	CNNVD	id:	CNNVD-201401-059	Trust: 0.6

sources: CNVD: CNVD-2014-00120 // BID: 64645 // CNNVD: CNNVD-201401-059

REFERENCES

url:	http://www.securityfocus.com/bid/64645	Trust: 1.2
url:	http://dariusfreamon.wordpress.com/2013/12/20/eco-range-default-admin-credentials/	Trust: 0.3
url:	http://www.dedicatedmicrosus.com/?id=249	Trust: 0.3

sources: CNVD: CNVD-2014-00120 // BID: 64645 // CNNVD: CNNVD-201401-059

CREDITS

Darius Freamon

Trust: 0.9

sources: BID: 64645 // CNNVD: CNNVD-201401-059

SOURCES

db:	CNVD	id:	CNVD-2014-00120
db:	BID	id:	64645
db:	CNNVD	id:	CNNVD-201401-059

LAST UPDATE DATE

2022-05-17T01:51:11.389000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2014-00120	date:	2014-01-09T00:00:00
db:	BID	id:	64645	date:	2013-12-20T00:00:00
db:	CNNVD	id:	CNNVD-201401-059	date:	2014-01-07T00:00:00

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2014-00120	date:	2014-01-09T00:00:00
db:	BID	id:	64645	date:	2013-12-20T00:00:00
db:	CNNVD	id:	CNNVD-201401-059	date:	2013-12-20T00:00:00