CVE-2007-4583

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-08-29 · updated 2026-06-16
Weakness: CWE-22

Description

Multiple absolute path traversal vulnerabilities in the nvUtility.Utility.1 ActiveX control in nvUtility.dll 1.0.14.0 in ACTi Network Video Recorder (NVR) SP2 2.0 allow remote attackers to (1) create or overwrite arbitrary files via a full pathname in the first argument to the SaveXMLFile method or (2) delete arbitrary files via a full pathname in the argument to the DeleteXMLFile method.

Affected products

Acti Network Video Recorder: sp2_2.0

References

http://osvdb.org/38386
http://osvdb.org/38387
http://secunia.com/advisories/26622
http://www.securityfocus.com/bid/25465
http://www.vupen.com/english/advisories/2007/2993
https://exchange.xforce.ibmcloud.com/vulnerabilities/36303
https://exchange.xforce.ibmcloud.com/vulnerabilities/36304
https://www.exploit-db.com/exploits/4323
https://www.exploit-db.com/exploits/4324
http://osvdb.org/38386
http://osvdb.org/38387
http://secunia.com/advisories/26622

Get alerted when CVE-2007-4583 or the next vulnerability affects your stack