Androvideo Vd 1
5 CVEs affecting Androvideo Vd 1. Latest disclosed: 2019-08-29. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-13405 | Critical | 9.8 | 2019-08-29 | A broken access control vulnerability found in Advan VD-1 firmware version 230 leads to insecure ADB service. An attacker can send a POST request to cgibin/Adb… |
CVE-2019-11064 | Critical | 9.8 | 2019-08-29 | A vulnerability of remote credential disclosure was discovered in Advan VD-1 firmware versions up to 230. An attacker can export system configuration which is… |
CVE-2019-13408 | High | 7.5 | 2019-08-29 | A relative path traversal vulnerability found in Advan VD-1 firmware versions up to 230. It allows attackers to download arbitrary files via url cgibin/ExportS… |
CVE-2019-13406 | High | 7.5 | 2019-08-29 | A broken access control vulnerability found in Advan VD-1 firmware versions up to 230. An attacker can send a POST request to cgibin/ApkUpload.cgi to install a… |
CVE-2019-13407 | Medium | 6.1 | 2019-08-29 | A XSS found in Advan VD-1 firmware versions up to 230. VD-1 responses a path error message when a requested resource was not found in page cgibin/ssi.cgi. It l… |