Castel Nextgen Dvr
4 CVEs affecting Castel Nextgen Dvr. Latest disclosed: 2020-06-04. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-11679 | High | 8.8 | 2020-06-04 | Castel NextGen DVR v1.0.0 is vulnerable to privilege escalation through the Adminstrator/Users/Edit/:UserId functionality. Adminstrator/Users/Edit/:UserId fail… |
CVE-2020-11681 | High | 8.1 | 2020-06-04 | Castel NextGen DVR v1.0.0 stores and displays credentials for the associated SMTP server in cleartext. Low privileged users can exploit this to create an admin… |
CVE-2020-11682 | Medium | 6.5 | 2020-06-04 | Castel NextGen DVR v1.0.0 is vulnerable to CSRF in all state-changing request. A __RequestVerificationToken is set by the web interface, and included in reques… |
CVE-2020-11680 | Medium | 6.5 | 2020-06-04 | Castel NextGen DVR v1.0.0 is vulnerable to authorization bypass on all administrator functionality. The application fails to check that a request was submitted… |