A-Plus Video Technologies NVR Sensitive Data Exposure Vulnerability

A sensitive data exposure vulnerability has been identified in certain NVR models by A-Plus Video Technologies. This vulnerability allows unauthenticated remote attackers to access the debug page and retrieve device status information. The affected models include AP-RM864P, AP-RM864, AP-RM832P, AP-RM832, AP-RM816, AP-BS416, AP-BS408, and AP-BS404, all running firmware version 2.1.0 or earlier.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive device information, potentially including status details that could be used for further attacks or exploitation.

Remediation

Users are advised to update the firmware to version 2.2.0 or later.