Description
VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows attackers to execute system commands with root privileges. Attackers can exploit the vulnerability through a cross-site request forgery (CSRF) mechanism to gain unauthorized system access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| VideoFlow | VideoFlow Digital Video Protection DVP | 2.10, 1.40.0.15, 2.10.0.5 | — |
References
- ExploitDB-44387 exploit
- VideoFlow Official Product Homepage product
- Zero Science Lab Disclosure (ZSL-2018-5455) third-party-advisory