CVE-2020-3923

🗓️ 27 Feb 2020 04:00:31Reported by twcertType

Misconfigured authentication in TAT-76 and TAT-77 series

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2020-3923 TONNET DVR – Broken Access Control	27 Feb 202004:00	–	cvelist
EUVD	EUVD-2020-25188	7 Oct 202500:30	–	euvd
NVD	CVE-2020-3923	27 Feb 202004:15	–	nvd
Prion	Default credentials	27 Feb 202004:15	–	prion

NVD

Node

tonnet tat-77104g1_firmwareRange≤tat-77104g1_20190107

AND

tonnet tat-77104g1Match-

Node

tonnet tat-70432n_firmwareRange≤tat-77208g1_20181225

AND

tonnet tat-70432nMatch-

Node

tonnet tat-71416g1_firmwareRange≤tat-71416g1_20181225

AND

tonnet tat-71416g1Match-

Node

tonnet tat-71832g1_firmwareRange≤tat-71832g1_20190510

AND

tonnet tat-71832g1Match-

Node

tonnet tat-76104g3_firmwareRange≤20181220_76104g3

AND

tonnet tat-76104g3Match-

Node

tonnet tat-76108g3_firmwareRange≤20181221_76208g3

AND

tonnet tat-76108g3Match-

Node

tonnet tat-76116g3_firmwareRange≤20181221_76216g3

AND

tonnet tat-76116g3Match-

Node

tonnet tat-76132g3_firmwareRange≤tat-70832g3_20181221-1

AND

tonnet tat-76132g3Match-

[
  {
    "platforms": [
      "TAT-76 series"
    ],
    "product": "DVR",
    "vendor": "TONNET",
    "versions": [
      {
        "lessThanOrEqual": "20191216",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "TAT-77 series"
    ],
    "product": "DVR",
    "vendor": "TONNET",
    "versions": [
      {
        "lessThanOrEqual": "20200213",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
tvn	www.tvn.twcert.org.tw/taiwanvn/TVN-201910003
chtsecurity	www.chtsecurity.com/news/4ef5eb3a-fdc3-4d78-8dd7-ec7213e2bbcf

21 Nov 2024 05:31Current

9.3High risk

Vulners AI Score9.3

CVSS 3.18.1 - 9.8

CVSS 210

EPSS0.0033

CWE-287