VYPR

Media Relay Service

by Infodraw

CVEs (1)

  • CVE-2025-43928MedApr 20, 2025
    risk 0.38cvss 5.8epss 0.01

    In Infodraw Media Relay Service (MRS) 7.1.0.0, the MRS web server (on port 12654) allows reading arbitrary files via ../ directory traversal in the username field. Reading ServerParameters.xml may reveal administrator credentials in cleartext or with MD5 hashing.