CVE-2020-10513

iCatch DVR - Broken Access Control

High · published April 15, 2020

CVSS v3.1
8.8
EPSS
1%
Percentile
57.0
In the wild
Unconfirmed
What it is

The file management interface of iCatch DVR firmware before 20200103 contains broken access control which allows the attacker to remotely manipulate arbitrary file.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00824 · 57.0th percentile
Published
2020-04-15T06:20Z
EPSS history
Timeline
  • 15 APR 06:20Z
    iCatch DVR - Broken Access Control
    cvelistv5