CVE-2019-25240 | BDVDB-2026-307498 Detail
RifatronDVR
Description#
Rifatron 5brid DVR contains an unauthenticated vulnerability in the animate.cgi script that allows unauthorized access to live video streams. Attackers can exploit the Mobile Web Viewer module by specifying channel numbers to retrieve sequential video snapshots without authentication.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: network.
Weaknesses#
- CWE-306 Missing Authentication for Critical Function
References#
Exploit#
History#
- Version 1Record published in the CVE List.