CVE-2020-11680

—

CVSS 3.1

6.5 medium

EPSS

1%p65

Published

Jun 4, 2020 (Jun 4, 2020)

Modified

Jun 17, 2026

Description

Castel NextGen DVR v1.0.0 is vulnerable to authorization bypass on all administrator functionality. The application fails to check that a request was submitted by an administrator. Consequently, a normal user can perform actions including, but not limited to, creating/modifying the file store, creating/modifying alerts, creating/modifying users, etc.

Vendors: castel
Products: nextgen dvr firmware
Weakness: CWE-862
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.