CVE Database · CVE-2007-6638
CVSS v3.1
N/A
EPSS
11.82%
Published
Jan 4, 2008
Modified
Jun 16, 2026
Public PoC / Exploit (2)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
March Networks DVR 3204 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames, passwords, device names, and IP addresses via a direct request for scripts/logfiles.tar.gz.
Weaknesses (CWE)
Affected Products (1)
References (16)