AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2020-36874

UNKNOWN · CVSS N/A EPSS 0.66%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-11-26 · Last synced 2026-08-04

CyberRota Analysis

This vulnerability has an unknown severity rating. It may be remotely exploitable.

CVE
CVE-2020-36874
Severity
UNKNOWN
CVSS
N/A
EPSS
0.66%

Original NVD Description

ACE SECURITY WIP-90113 HD cameras contain an unauthenticated configuration disclosure vulnerability in the /web/cgi-bin/hi3510/backup.cgi endpoint. The endpoint permits remote download of a compressed configuration backup without requiring authentication or authorization. The exposed backup may include administrative credentials and other sensitive device settings, enabling an unauthenticated remote attacker to obtain information that could facilitate further compromise of the camera or connected network.