Vd 1 Firmware

vd_1_firmware

Vendor: Androvideo • 5 CVEs

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-13408 2Androvideo Geovision 3Gv Vd8700 Firmware Gv Vr360 FirmwareVd 1 Firmware Jun 17, 2026 Aug 29, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A relative path traversal vulnerability found in Advan VD-1 firmware versions up to 230. It allows attackers to download arbitrary files via url cgibin/ExportSettings.cgi?Download=filepath, without any authentication.
CVE-2019-13407 2Androvideo Geovision 3Gv Vd8700 Firmware Gv Vr360 FirmwareVd 1 Firmware Jun 17, 2026 Aug 29, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 A XSS found in Advan VD-1 firmware versions up to 230. VD-1 responses a path error message when a requested resource was not found in page cgibin/ssi.cgi. It leads to a reflected XSS because the error message does not es...Show more A XSS found in Advan VD-1 firmware versions up to 230. VD-1 responses a path error message when a requested resource was not found in page cgibin/ssi.cgi. It leads to a reflected XSS because the error message does not escape properly.Show less
CVE-2019-13406 1Androvideo 1Vd 1 Firmware Jun 17, 2026 Aug 29, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A broken access control vulnerability found in Advan VD-1 firmware versions up to 230. An attacker can send a POST request to cgibin/ApkUpload.cgi to install arbitrary APK without any authentication.
CVE-2019-13405 1Androvideo 1Vd 1 Firmware Jun 17, 2026 Aug 29, 2019 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 A broken access control vulnerability found in Advan VD-1 firmware version 230 leads to insecure ADB service. An attacker can send a POST request to cgibin/AdbSetting.cgi to enable ADB without any authentication then tak...Show more A broken access control vulnerability found in Advan VD-1 firmware version 230 leads to insecure ADB service. An attacker can send a POST request to cgibin/AdbSetting.cgi to enable ADB without any authentication then take the compromised device as a relay or to install mining software.Show less
CVE-2019-11064 2Androvideo Geovision 3Gv Vd8700 Firmware Gv Vr360 FirmwareVd 1 Firmware Jun 17, 2026 Aug 29, 2019 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 A vulnerability of remote credential disclosure was discovered in Advan VD-1 firmware versions up to 230. An attacker can export system configuration which is not encrypted to get the administrator’s account and password...Show more A vulnerability of remote credential disclosure was discovered in Advan VD-1 firmware versions up to 230. An attacker can export system configuration which is not encrypted to get the administrator’s account and password in plain text via cgibin/ExportSettings.cgi?Export=1 without any authentication.Show less