GV-Face transmits sensitive user credentials and related authentication data over unencrypted HTTP connections.
GV-Face transmits sensitive user credentials and related authentication data over unencrypted HTTP connections. The HTTP traffic is not encrypted, an attacker with the ability to intercept network traffic.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- GeoVision Inc.
- Product
- GV-Face
- CVSS v4.0
- 10.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Weakness
- CWE-319
- NVD status
- Received
Why it ranks 33 (Notable)
- CVSS v4.0 10.0 critical
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.