CVE-2007-6638

March Networks DVR 3204 - Info Disclosure

Title source: llm

Description

March Networks DVR 3204 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames, passwords, device names, and IP addresses via a direct request for scripts/logfiles.tar.gz.

Exploits (2)

exploitdb WORKING POC VERIFIED
by Alex Hernandez · perlremotehardware
https://www.exploit-db.com/exploits/4797
nomisec WRITEUP
by alt3kx · poc
https://github.com/alt3kx/CVE-2007-6638

Scores

EPSS 0.0825
EPSS Percentile 92.2%

Details

CWE
CWE-264
Status published
Products (1)
march_networks/3204_dvr
Published Jan 04, 2008
Tracked Since Feb 18, 2026