CVE-2007-6638: March Networks 3204 Dvr

High severity, CVSS 10.0. EPSS: 12.6% chance of exploitation in the next 30 days.

March Networks DVR 3204 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames, passwords, device names, and IP addresses via a direct request for scripts/logfiles.tar.gz.

Affected products

• March Networks 3204 Dvr: any version

Published 2008-01-04. Last modified 2026-06-16.