PT-2019-16575
CVE-2019-3423
·
Publicado
2019-11-18
·
Atualizado
2019-11-20
Descrição por
CVSS 3.1
5.3
MédiaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
C520V21 smart camera devices versions V2.1.14 and below
Description
A permission and access control issue exists, allowing an attacker to construct a URL for directory traversal. This enables access to unauthorized files or resources.
Recommendations
For versions V2.1.14 and below, consider restricting access to the device until a patch is available. As a temporary workaround, limit the construction of URLs that could lead to directory traversal to minimize the risk of exploitation.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾