Multiple issues exist revolving around poor authentication mechanisms in GeoVision Digital Video Surveillance systems. These issues allow sniffed authentication credentials to be reused as-is or descrambled to allow the discovery of the original password. In certain configurations still pictures from security cameras can be viewed without providing any authentication. Versions 6.04, 6.1, and 7.0 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/39124/100505-1.txt
Source: https://packetstormsecurity.com/files/39124/100505-1.txt.html