Vulnerabilities (CVE)

Filtered by vendor Swannsecurity Subscribe
Filtered by product Dvr4-securanet
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2009-0644 1 Swannsecurity 1 Dvr4-securanet 2024-02-28 5.0 MEDIUM N/A
The HTTP interface in Swann DVR4-SecuraNet has a certain default administrative username and password, which makes it easier for remote attackers to obtain privileged access.
CVE-2009-0640 1 Swannsecurity 1 Dvr4-securanet 2024-02-28 5.0 MEDIUM N/A
Directory traversal vulnerability in the administrative web server in Swann DVR4-SecuraNet allows remote attackers to read arbitrary files via a .. (dot dot) in the URI, as demonstrated by reading the vy_netman.cfg file that contains passwords.