DBPower vulnerabilities

🔔 Create alert RSS

Published CVEs affecting DBPower products: 1 record(s), with severity, exploitation and fixes.

DBPower C300 HD Camera 1

Exploited only (KEV) →

CVE-2020-37157 High · 7.5 CWE-306 Feb 6, 2026

DBPower C300 HD Camera - Remote Configuration Disclosure

DBPower C300 HD Camera contains a configuration disclosure vulnerability that allows unauthenticated attackers to retrieve sensitive credentials through an unprotected configuration backup endpoint. Attackers can download the configuration file and extract hardcoded username and password by accessing the /tmpfs/config_backup.bin resource.