Description (CNA)
Rifatron 5brid DVR contains an unauthenticated vulnerability in the animate.cgi script that allows unauthorized access to live video streams. Attackers can exploit the Mobile Web Viewer module by specifying channel numbers to retrieve sequential video snapshots without authentication.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Rifatron Co., Ltd. / DVR | affected 5brid DVR (HD6-532/516, DX6-516/508/504, MX6-516/508/504, EH6-504); affected 7brid DVR (HD3-16V2, DX3-16V2/08V2/04V2, MX3-08V2/04V2); affected Firmware: <=8.0 (000143) |
CWE
CWE-306
References
- https://www.exploit-db.com/exploits/47368
- http://www.rifatron.com
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5532.php
ADP enrichment
No English description supplied.