:Alex Hernandez has reported a security issue in March Networks 3204 DVR, which can be exploited by malicious people to disclose sensitive information.The problem is that it is possible to download the logfiles, which contain certain sensitive information (e.g. usernames and passwords), by accessing a specific URL.The security issue is reported in 3204 DVR. Other versions may also be affected.Solution:The vendor has reportedly released a fix.Provided and/or discovered by:Alex Hernandez, SYB SecurityOriginal Advisory:http://www.sybsecurity.com/advisors/S…R_3204_Logfile_Information_Disclosure

Original post by Pankaj