CVE-2022-47070

Description

NVS365 V01 is vulnerable to Incorrect Access Control. After entering a wrong password, the url will be sent to the server twice. In the second package, the server will return the correct password information.

Affected Platforms

Weakness Type

NVD-CWE-Other, CWE-200

References

• https://github.com/Sylon001/NVS-365-Camera/tree/master/NVS365%20Network%20Video%…
• https://github.com/Sylon001/NVS365/tree/main/NVS-365-V01%E6%91%84%E5%83%8F%E5%A4…
• https://github.com/Sylon001/NVS-365-Camera/tree/master/NVS365%20Network%20Video%…
• https://github.com/Sylon001/NVS365/tree/main/NVS-365-V01%E6%91%84%E5%83%8F%E5%A4…