Macrovideo v380pro v1.4.97 shares the device id and password when sharing the device.
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.
Link | Tags |
---|---|
https://github.com/zzh-newlearner/record/blob/main/macrovideo_share.md | third party advisory exploit |