Skip to content
Noroxi

castel records

4 published records for vendor castel.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

4 records
  • CVE-2020-11679
    36Monitor

    Castel NextGen DVR v1.0.0 is vulnerable to privilege escalation through the Adminstrator/Users/Edit/:UserId functionality.

    HighCVSS 8.8No exploitEPSS 2%

    castel · nextgen dvr firmwareJun 4, 2020

  • CVE-2020-11681
    32Monitor

    Castel NextGen DVR v1.0.0 stores and displays credentials for the associated SMTP server in cleartext.

    HighCVSS 8.1No exploitEPSS 1%

    castel · nextgen dvr firmwareJun 4, 2020

  • CVE-2020-11680
    26Monitor

    Castel NextGen DVR v1.0.0 is vulnerable to authorization bypass on all administrator functionality.

    MediumCVSS 6.5No exploitEPSS 1%

    castel · nextgen dvr firmwareJun 4, 2020

  • CVE-2020-11682
    26Monitor

    Castel NextGen DVR v1.0.0 is vulnerable to CSRF in all state-changing request.

    MediumCVSS 6.5No exploitEPSS 0%

    castel · nextgen dvr firmwareJun 4, 2020