Hunt Electronic Hybrid DVR Exposure of Sensitive Information Vulnerability

A vulnerability allowing exposure of sensitive information has been identified in certain hybrid DVR models from Hunt Electronic, specifically the HBF-09KD and HBF-16NK. This vulnerability allows unauthenticated remote attackers to access a system configuration file and retrieve plaintext administrator credentials. The issue affects DVRs running firmware version V3.1.67_1786 BB11115 and earlier.

Impact

Exploitation of this vulnerability allows for unauthorized access to sensitive system information, including plaintext administrator credentials, which could be misused to gain further access or control over the affected system.

Remediation

Users are advised to update the DVR firmware to version V3.1.70_1806 BB50604 or later.