High severity7.5NVD Advisory· Published Feb 7, 2026· Updated Apr 15, 2026

CVE-2020-37157

Description

DBPower C300 HD Camera contains a configuration disclosure vulnerability that allows unauthenticated attackers to retrieve sensitive credentials through an unprotected configuration backup endpoint. Attackers can download the configuration file and extract hardcoded username and password by accessing the /tmpfs/config_backup.bin resource.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

DBPower/C300 HD Camerallm-create

Patches

Vulnerability mechanics

References

web.archive.org/web/20200620110617/https://donev.eu/blog/dbpower-c300-multiple-vulnerabilitiesnvd
www.exploit-db.com/exploits/48095nvd
www.vulncheck.com/advisories/dbpower-c-hd-camera-remote-configuration-disclosurenvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000