Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Honeywell NVR devices allow remote attackers to create a user account in the admin group by leveraging access to a guest account to obtain a session ID, and then sending that session ID in a userManager.addUser request to the /RPC2 URI. The attacker can login to the device with that new user account to fully control the device.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Honeywell NVR设备安全漏洞
Vulnerability Description
Honeywell NVR devices是美国霍尼韦尔（Honeywell）公司的一款网络视频录像机设备。 Honeywell NVR设备中存在安全漏洞。远程攻击者可利用该漏洞在管理组中创建用户账户，并登录账户，控制设备。
CVSS Information
N/A
Vulnerability Type
N/A