Test Kennung:	1.3.6.1.4.1.25623.1.0.114052
Kategorie:	Default Accounts
Titel:	Arecont Vision NVR No Administrator Vulnerability (HTTP)
Zusammenfassung:	The script checks if the installation of Arecont Vision's NVR software has no administrator user set; at the remote web server.
Beschreibung:	Summary: The script checks if the installation of Arecont Vision's NVR software has no administrator user set at the remote web server. Vulnerability Insight: The configuration of Arecont Vision's NVR software incomplete or misconfigured. Arecont Vision cameras do not ship with authentication enabled. It is up to the user to enable authentication, which means that initially, everyone can have access to the live camera feed and all configurations, including setting up an administrator user themselves. Vulnerability Impact: This issue may be exploited by a remote attacker to gain access to sensitive information or modify system configuration. Solution: Create an administrator user as soon as possible, to avoid exposing your live camera feed and configuration. Always choose a secure password and never choose common guessable default credentials such as 'admin:admin'. CVSS Score: 8.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:C/A:N
Copyright	Copyright (C) 2018 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.