Security Advisory
CVE-2020-36925
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Arteco Web Client DVR/NVR contains a session hijacking vulnerability with insufficient session ID complexity that allows remote attackers to bypass authentication. Attackers can brute force session IDs within a specific numeric range to obtain valid sessions and access live camera streams without authorization.