[DW-VA1P] local non-admin user can listen to covert channel audio

Description

DW-VA1P8 - 1.0.1.66

LOCAL DVR USER - NON ADMIN


Local non-admin users can listen to live audio from a covert channel on DVR. Smart web viewer blocks it.

Steps to Reproduce:

  1. As an admin, enable audio on a covert channel on the DVR.

  2. Log out of the admin account.

  3. Log in as a non-admin user.

  4. The user will not be able to see the video feed but will be able to hear the audio from the covert channel.

  5. Verify that Smart Web Viewer is blocking the video and audio.

Upload attachments

Drop your files to upload

(Max file size: 1.00 GiB)

Uploading...
(Template) Current File Name (1 / 7) 123KB / 2.1MB
(Template) File Name 123KB / 2.1MB
Upload completed. Click here to reload the page.

Child issues

Linked work items

Activity

FOCUS_JH 24 March 2025, 05:24

DVR의 Live Audio out 은 계정 상관없이 Audio 에서 설정된 Live Out 값으로 무조건 출력되고, Playback 인 경우 Covert 된 CH에서는 Video & AUdio 재생 안되는 시나리오입니다.

반면 Webviewer 는 해당 CH이 Covert 되는 경우에는 Live & Playback Audio 출력 안됩니다.