Local Agent DVR versions thru 6.6.1.0 are vulnerable to directory traversal that allows an unauthenticated local attacker to gain access to sensitive information, cause a server-side forgery request (SSRF), or execute OS commands.
Search vulnerabilities
CVE-2025-63408
CVSS 3.1 · 5.1 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2024-22515
Unrestricted File Upload vulnerability in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to upload arbitrary files via the upload audio component.
CVSS 3.1 · 8.8 High
EPSS 1.2%
KEV · Not listed
Vendors
Products
CVE-2024-22514
An issue discovered in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to run arbitrary files by restoring a crafted backup file.
CVSS 3.1 · 8.8 High
EPSS 1.4%
KEV · Not listed
Vendors
Products
CVE-2022-29775
iSpyConnect iSpy v7.2.2.0 allows attackers to bypass authentication via a crafted URL.
CVSS 3.1 · 9.8 Critical
EPSS 61.0%
KEV · Not listed
Vendors
Products
CVE-2022-29774
iSpy v7.2.2.0 is vulnerable to remote command execution via path traversal.
CVSS 3.1 · 9.8 Critical
EPSS 5.9%
KEV · Not listed
Vendors
Products
CVE-2020-13093
iSpyConnect.com Agent DVR before 2.7.1.0 allows directory traversal.
CVSS 3.1 · 5.3 Medium
EPSS 1.3%
KEV · Not listed
Vendors
Products
Page 1 of 1.