Vendors / Govicture Records 12 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3 CVSS 9.0–10.0
CVSS high 6 CVSS 7.0–8.9
Exploited now Govicture records in CISA KEV No Govicture vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 45
Stack-based Buffer Overflow vulnerability in the ONVIF server component of Victure PC420 smart camera allows an attacker to execute remote code on the target device.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01412 · Published 2021-08-30 · No fix listed CWE-121
Priority MEDIUM 40
Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext.
CVSS 3.1 HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00398 · Published 2024-09-18 · No fix listed CWE-256
Priority LOW 39
Victure PC420 1.1.39 was discovered to use a weak encryption key for the file enabled_telnet.dat on the Micro SD card.
CVSS 3.1 HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00164 · Published 2024-09-18 · No fix listed CWE-798
Priority LOW 29
Victure PC420 1.1.39 was discovered to use a weak and partially hardcoded key to encrypt data.
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.0035 · Published 2024-09-18 · No fix listed CWE-798
Open these records in search → All records by CVSS severity
Critical3 High6 Medium3 Low0 No CVSS0