Búsqueda de    
Vulnerabilidad   
    Buscar 191973 Descripciones CVE y
86218 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.114052
Categoría:Default Accounts
Título:Arecont Vision NVR No Administrator Vulnerability
Resumen:The script checks if the installation of Arecont Vision's NVR software has no administrator user set; at the remote web server.
Descripción:Summary:
The script checks if the installation of Arecont Vision's NVR software has no administrator user set
at the remote web server.

Vulnerability Insight:
The configuration of Arecont Vision's NVR software incomplete or misconfigured.
Arecont Vision cameras do not ship with authentication enabled. It is up to the user to enable authentication,
which means that initially, everyone can have access to the live camera feed and all configurations,
including setting up an administrator user themselves.

Vulnerability Impact:
This issue may be exploited by a remote attacker to gain access
to sensitive information or modify system configuration.

Solution:
Create an administrator user as soon as possible, to avoid exposing your live camera feed and configuration.
Always choose a secure password and never choose common guessable default credentials such as 'admin:admin'.

CVSS Score:
8.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:C/A:N

CopyrightThis script is Copyright (C) 2018 Greenbone Networks GmbH

Esta es sólo una de 86218 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2020 E-Soft Inc. Todos los derechos reservados.