Cp-vnr-3104 Firmware vulnerabilities
2 known vulnerabilities in Cp-vnr-3104 Firmware from Cpplusworld. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest first
- 7.4 High severity
Cp-vnr-3104 Firmware: Improper Certificate Validation
Improper handling and storage of certificates in CP Plus CP-VNR-3104 B3223P22C02424 allow attackers to decrypt communications or execute a man-in-the-middle attacks.
- 7.5 High severity
CP-VNR-3104, CP-VNR-3108, CP-VNR-3208: Exposure of Sensitive Information to an Unauthorized Actor
The vulnerability exists in CP-Plus NVR due to an improper input handling at the web-based management interface of the affected product. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulne