CVE-2020-3923

TONNET DVR – Broken Access Control

High · published February 27, 2020

CVSS v3.1
8.1
EPSS
2%
Percentile
76.8
In the wild
Unconfirmed
What it is

DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET, contain misconfigured authentication mechanism. Attackers can crack the default password and gain access to the system.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01679 · 76.8th percentile
Published
2020-02-27T04:00Z
EPSS history
Timeline
  • 27 FEB 04:00Z
    TONNET DVR – Broken Access Control
    cvelistv5