CVE-2015-4464

CVE-2015-4464 describes a critical authentication bypass vulnerability in Kguard Digital Video Recorder 104, 108, and v2 models, where the ActiveX client and application server lack any authorization or authentication. This allows unauthenticated remote attackers to achieve complete compromise of confidentiality, integrity, and availability with low attack complexity, as reflected by its CVSS score of 9.8. While there is no known active exploitation or publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion with 10 mentions.