Security Advisory

CVE-2020-11681

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-06-04 18:40:52
Last updated 2024-08-04 11:35:13
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Castel NextGen DVR v1.0.0 stores and displays credentials for the associated SMTP server in cleartext. Low privileged users can exploit this to create an administrator user and obtain the SMTP credentials.