March Networks DVR 3204 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames, passwords, device names, and IP addresses via a direct request for scripts/logfiles.tar.gz.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| 3204_dvr | March_networks | * | * |