9.8
CVSSv3

CVE-2018-10770

Published: 09/05/2018 Updated: 14/06/2018
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

download.rsp on ShenZhen Anni "5 in 1 XVR" devices allows remote malicious users to download the configuration (without a login) to discover the password.

Vulnerable Product Search on Vulmon Subscribe to Product

annigroup 5_in_1_xvr_firmware -