CVE-2021-27664CWE-269

exacqVision Web Service

Critical · published October 11, 2021

CVSS v3.1
9.8
EPSS
2%
Percentile
75.6
In the wild
Unconfirmed
What it is

🚨 An unauthenticated remote user can access sensitive credentials in exacqVision Server under specific configurations. This is a security nightmare waiting to happen! 🔥 Think of it like leaving the keys to your office in an unlocked drawer — any random visitor can stroll in and access the most important files without anyone noticing. An attacker could gain unfettered access to critical credentials, putting your entire system and sensitive data at risk. This means they could manipulate video feeds, change settings, or even lock you out entirely — a recipe for chaos in your security environment!

Put simply

Think of it like leaving the keys to your office in an unlocked drawer — any random visitor can stroll in and access the most important files without anyone noticing. This vulnerability allows an unauthenticated remote user to retrieve stored credentials from the exacqVision Server when specific configurations are in place, potentially exposing sensitive information.

What to do

An attacker could gain unfettered access to critical credentials, putting your entire system and sensitive data at risk. This means they could manipulate video feeds, change settings, or even lock you out entirely — a recipe for chaos in your security environment! To address this vulnerability, ensure your exacqVision Server is configured securely by applying the latest patches and restricting access controls. Review your settings to prevent any unauthorized access and monitor your system for unusual activity. You've got this! Take action now, and you'll squash this vulnerability in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01601 · 75.6th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2021-10-11T15:21Z
EPSS history
Timeline
  • 11 OCT 15:21Z
    exacqVision Web Service
    cvelistv5