Known vulnerabilities in DVR

Vendor: AVTECH Corporation
Software: DVR
Software CPE: cpe:2.3:h:avtech_corporation:dvr:*:*:*:*:*:*:*:*
Website: https://www.avtech.com.tw/
Total vulnerabilities: 9
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting DVR DVR is affected by 9 known vulnerabilities: 2 high, 5 medium, 2 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU48227 - Improper Validation of Certificate with Host Mismatch
 CWE-297 Medium
No
No
 - 09.11.2020 SB2016101133
#VU48226 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
 CWE-78 Low
No
No
 - 09.11.2020 SB2016101133
#VU48225 - Session Fixation
 CWE-384 High
No
No
 - 09.11.2020 SB2016101133
#VU48223 - Improper Authentication
 CWE-287 Medium
Available
No
 - 09.11.2020 SB2016101133
#VU48221 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
 CWE-78 High
Available
No
 - 09.11.2020 SB2016101133
#VU48220 - Server-Side Request Forgery (SSRF)
 CWE-918 Medium
Available
No
 - 09.11.2020 SB2016101133
#VU48219 - Improper Access Control
 CWE-284 Medium
No
No
 - 09.11.2020 SB2016101133
#VU48217 - Cross-Site Request Forgery (CSRF)
 CWE-352 Medium
No
No
 - 09.11.2020 SB2016101133
#VU48216 - Cleartext Storage of Sensitive Information
 CWE-312 Low
No
No
 - 09.11.2020 SB2016101133