Unauthenticated credential disclosure via request handler

Information disclosure in the Request Handler in Faraday GM8181 and GM828x 20240429 allows remote attackers to read DVR credentials. An unauthenticated request causes the handler to return stored credential data; the published proof of concept automates retrieval, but the specific route and implementation error are not preserved in the accessible advisory record. Network reachability to the DVR request interface is sufficient, with no authentication or user interaction required; the documented impact is limited to credential confidentiality.