CVE-2020-11681

Castel NextGen DVR v1.0.0 stores and displays credentials for the associated SMTP server in cleartext

published June 4, 2020

CVSS
—
EPSS
1%
Percentile
66.4
In the wild
Unconfirmed
What it is

Castel NextGen DVR v1.0.0 stores and displays credentials for the associated SMTP server in cleartext. Low privileged users can exploit this to create an administrator user and obtain the SMTP credentials.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01143 · 66.4th percentile
Published
2020-06-04T18:40Z
EPSS history
Timeline
  • 04 JUN 18:40Z
    Castel NextGen DVR v1.0.0 stores and displays credentials for the associated SMTP server in cleartext
    cvelistv5