← back
CVE-2018-15745

CVE-2018-15745

EPSS 97.7%
Argus Surveillance DVR 4.0.0.0 devices allow Unauthenticated Directory Traversal, leading to File Disclosure via a ..%2F in the WEBACCOUNT.CGI RESULTPAGE parameter.
Affected products
n/a · n/a
public PoCs found — 4
githubgithub.com/Jasurbek-Masimov/CVE-2018-15745★ 0cve_referencepacketstormsecurity.com/files/149134/Argus-Surveillance-DVR-4.0.0.0-Directory-Traversal.htmlunverifiedcve_referencewww.exploit-db.com/exploits/45296/unverifiedexploitdbwww.exploit-db.com/exploits/45296unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://hyp3rlinx.altervista.org/advisories/ARGUS-SURVEILLANCE-DVR-v4-UNAUTHENTICATED-PATH-TRAVERSAL-FILE-DISCLOSURE.txthttp://packetstormsecurity.com/files/149134/Argus-Surveillance-DVR-4.0.0.0-Directory-Traversal.htmlhttps://www.exploit-db.com/exploits/45296/