Aver

aver

4 CVEs • 3 products

Products (3)

Click to collapse

Toggle

Eh6108h+ Firmware

eh6108h+_firmware

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-27055 1Aver 1Ptzapp 2 Jun 17, 2026 Mar 24, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Aver Information Inc PTZApp2 v20.01044.48 allows attackers to access sensitive files via a crafted GET request.
CVE-2016-6537 1Aver 1Eh6108h+ Firmware May 6, 2026 Sep 19, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 AVer Information EH6108H+ devices with firmware X9.03.24.00.07l store passwords in a cleartext base64 format and require cleartext credentials in HTTP Cookie headers, which allows context-dependent attacks to obtain sens...Show more AVer Information EH6108H+ devices with firmware X9.03.24.00.07l store passwords in a cleartext base64 format and require cleartext credentials in HTTP Cookie headers, which allows context-dependent attacks to obtain sensitive information by reading these strings.Show less
CVE-2016-6536 1Aver 1Eh6108h+ Firmware May 6, 2026 Sep 19, 2016 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 The /setup URI on AVer Information EH6108H+ devices with firmware X9.03.24.00.07l allows remote attackers to bypass intended page-access restrictions or modify passwords by leveraging knowledge of a handle parameter valu...Show more The /setup URI on AVer Information EH6108H+ devices with firmware X9.03.24.00.07l allows remote attackers to bypass intended page-access restrictions or modify passwords by leveraging knowledge of a handle parameter value.Show less
CVE-2016-6535 1Aver 1Eh6108h+ Firmware May 6, 2026 Sep 19, 2016 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 AVer Information EH6108H+ devices with firmware X9.03.24.00.07l have hardcoded accounts, which allows remote attackers to obtain root access by leveraging knowledge of the credentials and establishing a TELNET session.