Kguard Digital Video Recorder Multiple Security Vulnerabilities

Bugtraq ID:	73032
Class:	Unknown
CVE:	CVE-2015-4464
Remote:	Yes
Local:	No
Published:	Mar 10 2015 12:00AM
Updated:	Jul 15 2015 12:45AM
Credit:	Federick Joe P Fajardo
Vulnerable:
Not Vulnerable:

Kguard Digital Video Recorder Multiple Security Vulnerabilities

Kguard Digital Video Recorder is prone to the following security vulnerabilities:

1. A security bypass vulnerabilities
2. An information-disclosure vulnerability
3. Multiple denial-of-service vulnerability
4. Multiple command-injection vulnerability

An attacker may leverage these issues to execute arbitrary commands in the context of the vulnerable application, to gain sensitive information, bypass the authentication mechanism and gain unauthorized access, and cause denial-of-service conditions.

Kguard Digital Video Recorder Multiple Security Vulnerabilities

Attackers can exploit these issues using browser.

Kguard Digital Video Recorder Multiple Security Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Kguard Digital Video Recorder Multiple Security Vulnerabilities

References:

• Multiple Vulnerabilities with Kguard Digital Video Recorders (Federick Joe P Fajardo)
  
• CVE-2015-4464 Insufficient Authorization Checks Request Handling Remote Authenti (Federick Joe P Fajardo)
  
• Kguard Digital Video Recorders - Product page (KWorld)