View CSAF

Summary

Successful exploitation of this vulnerability allows an attacker's malicious script to execute in the browser of any authenticated user or administrator who accesses the affected interface. This could lead to compromise of user sessions, execution of unauthorized actions with the victim's privileges, exposure or manipulation of sensitive data, and degradation of overall system integrity.

The following versions of CP Plus 8 Ch. Network Video Recorder are affected:

CP-UNR-108F1 Hardware V1.0

CP-UNR-108F1 Web V3.2.7.128806

CP-UNR-108F1 System V4.001.00AT009.0.R

CVSS Vendor Equipment Vulnerabilities

v3 8.4 CP Plus CP Plus 8 Ch.…