CVE-2016-6537

Published: Sep 19, 2016Modified: May 6, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

AVer Information EH6108H+ devices with firmware X9.03.24.00.07l store passwords in a cleartext base64 format and require cleartext credentials in HTTP Cookie headers, which allows context-dependent attacks to obtain sensitive information by reading these strings.

Affected (1)

Products: Aver: Eh6108h+ Firmware

1 product

Eh6108h+ Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Aver Eh6108h+ Firmware	Version x9.03.24.00.07l

Running on/with	Platform Versions
Aver Eh6108h+	All versions

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

http://www.kb.cert.org/vuls/id/667480

Source: cret@cert.org

Third Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/92936

Source: cret@cert.org

http://www.kb.cert.org/vuls/id/667480

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/92936

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.