CVE-2021-45043

Name of the Vulnerable Software and Affected Versions: HD-Network Real-time Monitoring System version 2.0

Description: The issue allows for directory traversal, enabling access to sensitive files such as /etc/shadow. This is achieved through the s Language parameter in the /language/lang API endpoint.

Recommendations: For HD-Network Real-time Monitoring System version 2.0, consider restricting access to the /language/lang API endpoint until a patch is available. As a temporary workaround, avoid using the s Language parameter in this endpoint to minimize the risk of exploitation.