Inadequate access control vulnerability in Davantis DFUSION v6.177.7, which allows unauthorised actors to extract images and videos related to alarm events through access to “/alarms/<ALARM_ID>/<MEDIA>”, where the “MEDIA…
CVSS 4.0HIGH 8.7·Network·No auth·No interaction·EPSS 0.00305·Published 2025-11-24·Fixed in 6.186.1CWE-862
Inadequate access control vulnerability in Davantis DDFUSION v6.177.7, which allows unauthorised actors to retrieve perspective parameters from security camera settings by accessing “/cameras/<CAMERA_ID>/perspective”.
CVSS 4.0MEDIUM 6.9·Network·No auth·No interaction·EPSS 0.00305·Published 2025-11-24·Fixed in 6.186.1CWE-862