Swannsecurity: >> Dvr4-Securanet Security Vulnerabilities
Directory traversal vulnerability in the administrative web server in Swann DVR4-SecuraNet allows remote attackers to read arbitrary files via a .. (dot dot) in the URI, as demonstrated by reading the vy_netman.cfg file that contains passwords.
CVSS Score
5.0
EPSS Score
0.028
Published
2009-02-20
The HTTP interface in Swann DVR4-SecuraNet has a certain default administrative username and password, which makes it easier for remote attackers to obtain privileged access.
CVSS Score
5.0
EPSS Score
0.012
Published
2009-02-18