Permissions, Privileges, and Access Controls in DVR VX16 - #VU54664

 

Permissions, Privileges, and Access Controls in DVR VX16 - #VU54664

Published: July 12, 2021


Vulnerability identifier: #VU54664
CSH Severity: Low
CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: N/A
CWE-ID: CWE-264
Exploitation vector: Local access
Exploit availability: No public exploit available
Vulnerable software:
DVR VX16
Software vendor:
Visual Tools

Description

The vulnerability allows a local attacker to escalate privileges on the system.

The vulnerability exists due to application does not properly impose security restrictions. A local attacker can abuse an unsafe Sudo configuration and gain elevated privileges on the target system.


Remediation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

External links