Description (CNA)
VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows attackers to execute system commands with root privileges. Attackers can exploit the vulnerability through a cross-site request forgery (CSRF) mechanism to gain unauthorized system access.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| VideoFlow Ltd. / VideoFlow Digital Video Protection DVP | affected 2.10; affected 1.40.0.15; affected 2.10.0.5 |
CWE
CWE-78
References
- https://www.exploit-db.com/exploits/44387
- http://www.video-flow.com
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5455.php
ADP enrichment
No English description supplied.