CVE-2007-6638 March Networks DVR 3204 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames, passwords, device names, and IP addresses v...
HighCVSS 10.0
EPSS 12.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
March Networks DVR 3204 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames, passwords, device names, and IP addresses via a direct request for scripts/logfiles.tar.gz.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| march networks 3204 dvr | All versions | No fix listed |
References
- 39726 vdb-entry
- 28211 third-party-advisory vendor-advisory
- www.milw0rm.com
- 27054 exploit vdb-entry
- www.sybsecurity.com
- www.sybsecurity.com
- www.sybsecurity.com
- 4797 exploit