An issue in the com.oneed.dvr.service.DownloadFirmwareService component of IMOU GO v1.0.11 allows attackers to force the download of arbitrary files.Referenceshttps://github.com/actuator/imou/blob/main/com.dahua.imou.go-V1.0.11.mdhttps://play.google.com/store/apps/details?id=com.dahua.imou.go
