|
2022-12-01
|
CVE-2022-45045
|
Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated attacker, possibly using the default admin:tlJwpbo6 credentials, can connect to port 34567 and execute arbitrary operating system commands via a crafted JSON file during an upgrade request. Since at least...
|
Mbd6304t, Mbd6304t_firmware, Nbd6808t\-Pl, Nbd6808t\-Pl_firmware, Nbd7004t\-P, Nbd7004t\-P_firmware, Nbd7008t\-P, Nbd7008t\-P_firmware, Nbd7016t\-F\-V2, Nbd7016t\-F\-V2_firmware, Nbd7024h\-P, Nbd7024h\-P_firmware, Nbd7024t\-P, Nbd7024t\-P_firmware, Nbd7804r\-F\(Ep\), Nbd7804r\-F\(Ep\)_firmware, Nbd7804r\-F\(Hdmi\), Nbd7804r\-F\(Hdmi\)_firmware, Nbd7804r\-Fw, Nbd7804r\-Fw_firmware, Nbd7804t\-Pl, Nbd7804t\-Pl_firmware, Nbd7808r\-Pl\(Ep\), Nbd7808r\-Pl\(Ep\)_firmware, Nbd7808r\-Pl\(Hdmi\), Nbd7808r\-Pl\(Hdmi\)_firmware, Nbd7808t\-Pl, Nbd7808t\-Pl_firmware, Nbd7904r\-Fs, Nbd7904r\-Fs_firmware, Nbd7904t\-P, Nbd7904t\-P_firmware, Nbd7904t\-Pl, Nbd7904t\-Pl\-Xpoe, Nbd7904t\-Pl\-Xpoe_firmware, Nbd7904t\-Pl_firmware, Nbd7904t\-Plc\-Xpoe, Nbd7904t\-Plc\-Xpoe_firmware, Nbd7904t\-Q, Nbd7904t\-Q_firmware, Nbd7908t\-Q, Nbd7908t\-Q_firmware, Nbd8004r\-Pl\(Ep\), Nbd8004r\-Pl\(Ep\)_firmware, Nbd8004r\-Yl\(Ep\), Nbd8004r\-Yl\(Ep\)_firmware, Nbd8004t\-Q, Nbd8004t\-Q_firmware, Nbd8008r\-Pl, Nbd8008r\-Pl\(Ep\), Nbd8008r\-Pl\(Ep\)_firmware, Nbd8008r\-Pl_firmware, Nbd8008r\-Yl\(Ep\), Nbd8008r\-Yl\(Ep\)_firmware, Nbd8008ra\-Gl, Nbd8008ra\-Gl_firmware, Nbd8008ra\-Glk, Nbd8008ra\-Glk_firmware, Nbd8008ra\-Ul\(Ep\), Nbd8008ra\-Ul\(Ep\)_firmware, Nbd8008ra\-Ula, Nbd8008ra\-Ula_firmware, Nbd8008ra\-Ulk, Nbd8008ra\-Ulk_firmware, Nbd8008t\-Q, Nbd8008t\-Q_firmware, Nbd8009s\-Ula\-V2, Nbd8009s\-Ula\-V2_firmware, Nbd8010s\-Kl\-V2, Nbd8010s\-Kl\-V2_firmware, Nbd8016r\-Ul, Nbd8016r\-Ul_firmware, Nbd8016ra\-K\(Ep\), Nbd8016ra\-K\(Ep\)_firmware, Nbd8016ra\-Ul, Nbd8016ra\-Ul\(Ep\), Nbd8016ra\-Ul\(Ep\)_firmware, Nbd8016ra\-Ul_firmware, Nbd8016ra\-Ula, Nbd8016ra\-Ula_firmware, Nbd8016ra\-Ulk, Nbd8016ra\-Ulk_firmware, Nbd8016s\-Kl\-V2, Nbd8016s\-Kl\-V2_firmware, Nbd8016s\-Ula\-V2, Nbd8016s\-Ula\-V2_firmware, Nbd8016t\-Q\-V2, Nbd8016t\-Q\-V2_firmware, Nbd8025r\-Ul, Nbd8025r\-Ul_firmware, Nbd8032h4\-P, Nbd8032h4\-P_firmware, Nbd8032h4\-Q, Nbd8032h4\-Q_firmware, Nbd8032h4\-Qe, Nbd8032h4\-Qe_firmware, Nbd8032h4\-Ul, Nbd8032h4\-Ul_firmware, Nbd8032h8\-P, Nbd8032h8\-P_firmware, Nbd8032h8\-Qe, Nbd8032h8\-Qe_firmware, Nbd8032ra\-Ul\-V2, Nbd8032ra\-Ul\-V2_firmware, Nbd8064h8\-P, Nbd8064h8\-P_firmware, Nbd80n16ra\-Kl, Nbd80n16ra\-Kl\(Ep\), Nbd80n16ra\-Kl\(Ep\)_firmware, Nbd80n16ra\-Kl_firmware, Nbd80s08s\-Kl\(Ep\), Nbd80s08s\-Kl\(Ep\)_firmware, Nbd80s10s\-Kl, Nbd80s10s\-Kl_firmware, Nbd80s16s\-Kl, Nbd80s16s\-Kl\(Ep\), Nbd80s16s\-Kl\(Ep\)_firmware, Nbd80s16s\-Kl_firmware, Nbd80x09ra\-Kl, Nbd80x09ra\-Kl_firmware, Nbd80x09s\-Kl, Nbd80x09s\-Kl_firmware, Nbd88x09s\-Kl, Nbd88x09s\-Kl_firmware, Nbd8904r\-Pl, Nbd8904r\-Pl_firmware, Nbd8904r\-Yl, Nbd8904r\-Yl_firmware, Nbd8904t\-Gsc\-Xpoe, Nbd8904t\-Gsc\-Xpoe_firmware, Nbd8904t\-Q, Nbd8904t\-Q_firmware, Nbd8908r\-Pl, Nbd8908r\-Pl_firmware, Nbd8908r\-Yl, Nbd8908r\-Yl_firmware, Nbd8908t\-Pl\-Xpoe, Nbd8908t\-Pl\-Xpoe_firmware, Nbd8908t\-Plc\-Xpoe, Nbd8908t\-Plc\-Xpoe_firmware, Nbd8916f4\-Q, Nbd8916f4\-Q_firmware, Nbd8916f8\-Q, Nbd8916f8\-Q_firmware
|
8.8
|
|
|