CVE-2022-47070

NVS365 V01 is vulnerable to Incorrect Access Control. After entering a wrong password, the url will be sent to the server twice. In the second package, the server will return the correct password information.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2023-02-03

Last modified

2025-03-26

Weaknesses

CWE-200

Affected products

• Nvs-365-v01 Firmware (Nvs365)

References

• https://github.com/Sylon001/NVS-365-Camera/tree/master/NVS365%20Network%20Video%20Server%20Password%20Information%20Una…
• https://github.com/Sylon001/NVS365/tree/main/NVS-365-V01%E6%91%84%E5%83%8F%E5%A4%B4%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF…