CVE Database
/

CVE-2016-6537

Back to search

CVE-2016-6537

Published: Sep 19, 2016

Modified: Aug 6, 2024

PUBLISHED

Description

AVer Information EH6108H+ devices with firmware X9.03.24.00.07l store passwords in a cleartext base64 format and require cleartext credentials in HTTP Cookie headers, which allows context-dependent attacks to obtain sensitive information by reading these strings.

VendorProductVersions

n/a

n/a

affected
n/a

References

VU#667480
third-party-advisory
x_refsource_CERT-VN
92936
vdb-entry
x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now