High severity7.5NVD Advisory· Published Feb 7, 2026· Updated Apr 15, 2026

CVE-2020-37157

Description

DBPower C300 HD Camera contains a configuration disclosure vulnerability that allows unauthenticated attackers to retrieve sensitive credentials through an unprotected configuration backup endpoint. Attackers can download the configuration file and extract hardcoded username and password by accessing the /tmpfs/config_backup.bin resource.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

web.archive.org/web/20200620110617/https://donev.eu/blog/dbpower-c300-multiple-vulnerabilitiesnvd
www.exploit-db.com/exploits/48095nvd
www.vulncheck.com/advisories/dbpower-c-hd-camera-remote-configuration-disclosurenvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000