The web interface for Everfocus EDR1600 DVR allows remote attackers to bypass authentication and access live cams via certain vectors.Referenceshttp://www.securityfocus.com/archive/1/507373/100/100/threadedhttps://exchange.xforce.ibmcloud.com/vulnerabilities/53909http://www.osvdb.org/59139http://secunia.com/advisories/37108http://seclists.org/fulldisclosure/2009/Oct/293