Approved changes feed: RSS · Atom

cpe:2.3:a:davantis:dfusion:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDavantis (77658f9a-ce2d-5680-90c0-ee09fddb1b1b)
ProductDfusion (6b6851e7-67bc-5574-a41e-1c9155df5876)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-41017 vulnerable 2026-06-08 07:25:06.530679 Multiple vulnerabilities in DFUSION by Davantis
Inadequate access control vulnerability in Davantis DDFUSION v6.177.7, which allows unauthorised actors to retrieve perspective parameters from security camera settings by accessing “/cameras/<CAMERA_ID>/perspective”.
Published: 2025-11-24T12:20:25.873Z
Updated: 2025-12-01T15:37:19.033Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41016 vulnerable 2026-06-08 07:25:06.530199 Multiple vulnerabilities in DFUSION by Davantis
Inadequate access control vulnerability in Davantis DFUSION v6.177.7, which allows unauthorised actors to extract images and videos related to alarm events through access to “/alarms/<ALARM_ID>/<MEDIA>”, where the “MEDIA” parameter can take the value of “snapshot” or “video.mp4”. These media files contain images recorded by security cameras in response to triggered alerts.
Published: 2025-11-24T12:18:45.678Z
Updated: 2025-11-24T13:11:29.745Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.