Description
Certain NVR models developed by A-Plus Video Technologies has a Sensitive Data Exposure vulnerability, allowing unauthenticated remote attackers to access the debug page and obtain device status information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| A-Plus Video Technologies | AP-RM864P | ≤ 2.1.0 | — |
| A-Plus Video Technologies | AP-RM864 | ≤ 2.1.0 | — |
| A-Plus Video Technologies | AP-RM832P | ≤ 2.1.0 | — |
| A-Plus Video Technologies | AP-RM832 | ≤ 2.1.0 | — |
| A-Plus Video Technologies | AP-RM816 | ≤ 2.1.0 | — |
| A-Plus Video Technologies | AP-BS416 | ≤ 2.1.0 | — |
| A-Plus Video Technologies | AP-BS408 | ≤ 2.1.0 | — |
| A-Plus Video Technologies | AP-BS404 | ≤ 2.1.0 | — |
References
- https://www.twcert.org.tw/tw/cp-132-10620-527f1-1.html third-party-advisory
- https://www.twcert.org.tw/en/cp-139-10621-55584-2.html third-party-advisory