Arteco-Global vulnerabilities
Published CVEs affecting Arteco-Global products: 1 record(s), with severity, exploitation and fixes.
CVE-2020-36925
Critical · 9.8
CWE-331 Jan 6, 2026
Arteco Web Client DVR/NVR Session ID Brute Force Authentication Bypass
Arteco Web Client DVR/NVR contains a session hijacking vulnerability with insufficient session ID complexity that allows remote attackers to bypass authentication. Attackers can brute force session IDs within a specific numeric range to obtain valid sessions and access live camera streams without authorization.