CVE-2020-11625

CVE-2020-11625 describes an information leakage vulnerability in AvertX HD438 and HD838 IP cameras. The flaw allows attackers to enumerate valid usernames by observing different responses to failed login attempts, specifically the presence or absence of a salt value. This vulnerability has a medium severity CVSS score of 5.3, indicating it can be exploited remotely with low attack complexity to achieve low confidentiality impact, primarily facilitating brute-force attacks. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.