Known vulnerabilities in NVR

Vendor: AVTECH Corporation
Software: NVR
Software CPE: cpe:2.3:h:avtech_corporation:nvr:*:*:*:*:*:*:*:*
Website: https://www.avtech.com.tw/
Total vulnerabilities: 7
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting NVR NVR is affected by 7 known vulnerabilities: 1 high, 4 medium, 2 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU48227 - Improper Validation of Certificate with Host Mismatch
 CWE-297 Medium
No
No
 - 09.11.2020 SB2016101133
#VU48226 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
 CWE-78 Low
No
No
 - 09.11.2020 SB2016101133
#VU48225 - Session Fixation
 CWE-384 High
No
No
 - 09.11.2020 SB2016101133
#VU48223 - Improper Authentication
 CWE-287 Medium
Available
No
 - 09.11.2020 SB2016101133
#VU48219 - Improper Access Control
 CWE-284 Medium
No
No
 - 09.11.2020 SB2016101133
#VU48217 - Cross-Site Request Forgery (CSRF)
 CWE-352 Medium
No
No
 - 09.11.2020 SB2016101133
#VU48216 - Cleartext Storage of Sensitive Information
 CWE-312 Low
No
No
 - 09.11.2020 SB2016101133