CVE-2019-13408
Published Aug 29, 2019A relative path traversal vulnerability found in Advan VD-1 firmware versions up to 230. It allows attackers to download arbitrary files via url cgibin/ExportSettings.cgi?Download…
Vendor/product archive
androvideo / vd_1 CVEs
Beta · best-effort5 CVEs tagged to androvideo / vd_1 — 2 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.
CVE-2019-13407
Published Aug 29, 2019A XSS found in Advan VD-1 firmware versions up to 230. VD-1 responses a path error message when a requested resource was not found in page cgibin/ssi.cgi. It leads to a reflected…
CVE-2019-13406
Published Aug 29, 2019A broken access control vulnerability found in Advan VD-1 firmware versions up to 230. An attacker can send a POST request to cgibin/ApkUpload.cgi to install arbitrary APK without…
CVE-2019-13405
Published Aug 29, 2019A broken access control vulnerability found in Advan VD-1 firmware version 230 leads to insecure ADB service. An attacker can send a POST request to cgibin/AdbSetting.cgi to enabl…
CVE-2019-11064
Published Aug 29, 2019A vulnerability of remote credential disclosure was discovered in Advan VD-1 firmware versions up to 230. An attacker can export system configuration which is not encrypted to get…
Showing 1-5 of 5 CVEsPage 1 of 1