← Back

CVE-2023-3705

nvd nist
Published: Aug 24, 2023Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

The vulnerability exists in CP-Plus NVR due to an improper input handling at the web-based management interface of the affected product. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful exploitation of this vulnerability could allow the remote attacker to obtain sensitive information on the targeted device.

Affected (3)

Cpplusworld
3 products
Cp Vnr 3104 Firmware
Cp Vnr 3108 Firmware
Cp Vnr 3208 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cp Vnr 3104 Firmware
Before b3223p22c02424
Running on/withPlatform Versions
Cpplusworld
Cp Vnr 3104
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cp Vnr 3108 Firmware
Before b3223p22c02424
Running on/withPlatform Versions
Cpplusworld
Cp Vnr 3108
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cp Vnr 3208 Firmware
Before b3223p22c02424
Running on/withPlatform Versions
Cpplusworld
Cp Vnr 3208
All versions

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: vdisclose@cert-in.org.in
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory

Timeline

No history available yet.