CVE-2007-6638
March Networks DVR 3204 - Info Disclosure
Title source: llmDescription
March Networks DVR 3204 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames, passwords, device names, and IP addresses via a direct request for scripts/logfiles.tar.gz.
Exploits (2)
exploitdb
WORKING POC
VERIFIED
by Alex Hernandez · perlremotehardware
https://www.exploit-db.com/exploits/4797
References (8)
Scores
EPSS
0.0825
EPSS Percentile
92.2%
Details
CWE
CWE-264
Status
published
Products (1)
march_networks/3204_dvr
Published
Jan 04, 2008
Tracked Since
Feb 18, 2026