CVE-2018-15745
60Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 98%
from disclosure to weapon0 days
Published on NVDAug 30
1st PoCAug 29
exploitation probability
98%top 1% of all CVEs
observed exploitation
nono source reports it
4 public exploit(s)
Argus Surveillance DVR 4.0.0.0 devices allow Unauthenticated Directory Traversal, leading to File Disclosure via a ..%2F in the WEBACCOUNT.CGI RESULTPAGE parameter.
Affected products
n/a · n/apublic PoCs found — 4✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/45296githubgithub.com/Jasurbek-Masimov/CVE-2018-15745★ 0cve_referencepacketstormsecurity.com/files/149134/Argus-Surveillance-DVR-4.0.0.0-Directory-Traversal.htmlunverifiedcve_referencewww.exploit-db.com/exploits/45296/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.