CVE-2016-15047 | AVTECH IP Camera/NVR/and DVR Devices CloudSetup.cgi exefile os command injection (EDB-40500)

A vulnerability categorized as critical has been discovered in AVTECH IP Camera, NVR and and DVR Devices. The impacted element is an unknown function of the file CloudSetup.cgi. Such manipulation of the argument exefile leads to os command injection.

This vulnerability is listed as CVE-2016-15047. The attack may be performed from remote. In addition, an exploit is available.