Everfocus EDSR series Authentication Bypass

vendor:

EDSR series

by:

Andrea Fabrizi

7.5

CVSS

HIGH

Authentication Bypass

287

CWE

Product Name: EDSR series

Affected Version From: 1.4

Affected Version To: 1.4 and older

Patch Exists: NO

Related CWE: N/A

CPE: a:everfocus:edsr_series

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2009

Everfocus EDSR series Authentication Bypass

The EDSR firmware does not handle user authentication and sessions correctly, allowing an attacker to connect to a remote DVR without a username and password and view the live cams.

Mitigation:

The vendor has been informed of the vulnerability, but there is no solution at this time.

Source

Exploit-DB raw data:

**************************************************************
Product: Everfocus EDSR series
Version affected: 1.4 and older
Website: http://www.everfocus.com/
Discovered By: Andrea Fabrizi
Email: andrea.fabrizi () gmail com
Web: http://www.andreafabrizi.it
Vuln: remote DVR applet authentication bypass
**************************************************************

The EDSR firmware don't handle correctly users authentication and sessions.

This exploit let you to connect to every remote DVR (without username
and password) and see the live cams :)
Exploit: http://www.andreafabrizi.it/files/EverFocus_Edsr_Exploit.tar.gz

I discovered this vulnerability one year ago and i have informed the
vendor, but apparently
there is no solution at this time.

-- 
Andrea Fabrizi
http://www.andreafabrizi.it


https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/10209.tar.gz (2009-11-22-EverFocus_Edsr_Exploit.tar.gz)