Security advisory: Pre-authentication SYSTEM RCE in Vicon Valerus ViconNet Gateway 25.200.46.0 (Vicon Industries)

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-08-06 19:23 UTC
Importiert: 2026-08-06 20:11 UTC
Quelle-ID: full_disc
uid_hash: 4543933e994deaa3ab242b1f08968cd632528ae9513f4ca0d7ee645efa62d020

Full Disclosure

Inhalt

Posted by disclosure via Fulldisclosure on Aug 06 0day Rubbish Research Team is publicly disclosing a vulnerability in Vicon Valerus ViconNet Gateway 25.200.46.0 (Vicon

Industries). The research is published and a proof-of-concept is available.

Pre-authentication SYSTEM RCE (CVSS 9.8, pre-authentication)

Vicon Valerus ViconNet Gateway ships an ASP.NET Web API (OWIN self-host, VII.NVR.Host.exe Windows service) bound to

/NVR/api/v1 on ports 8084/8444. The endpoint POST...

No data

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss

Zurueck zur Eintrags-Liste