CVE-2020-10514

iCatch DVR - Command Injection

High · published April 15, 2020

CVSS v3.1
8.8
EPSS
2%
Percentile
75.4
In the wild
Unconfirmed
What it is

iCatch DVR firmware before 20200103 do not validate function parameter properly, resulting attackers executing arbitrary command.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01583 · 75.4th percentile
Published
2020-04-15T06:20Z
EPSS history
Timeline
  • 15 APR 06:20Z
    iCatch DVR - Command Injection
    cvelistv5