Vulnerability · Published Apr 15, 2020 · Assigned by twcert
CVE-2020-10513iCatch DVR - Broken Access Control
High 8.8
In plain English
A high-severity security flaw in DVR firmware from iCatch Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.8%top 42.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The file management interface of iCatch DVR firmware before 20200103 contains broken access control which allows the attacker to remotely manipulate arbitrary file.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| iCatch Inc. | DVR firmware | before 20200103 |
References
- https://www.twcert.org.tw/tw/cp-132-3533-10afe-1.html x_refsource_CONFIRM
- https://www.chtsecurity.com/news/008fcbe8-198e-4c21-9417-5ba79a6b0e7d x_refsource_CONFIRM