CVE-2020-3924

🗓️ 27 Feb 2020 04:00:32Reported by twcertType

TAT-76/77 series DVR firmware allows command injection via patch files

Reporter	Title	Published	Views	Family All 7
Cvelist	CVE-2020-3924 TONNET DVR – Firmware Injection	27 Feb 202004:00	–	cvelist
EUVD	EUVD-2020-25189	7 Oct 202500:30	–	euvd
NVD	CVE-2020-3924	27 Feb 202004:15	–	nvd
OSV	CVE-2020-3924	27 Feb 202004:15	–	osv
Prion	Design/Logic Flaw	27 Feb 202004:15	–	prion
Positive Technologies	PT-2020-17800	27 Feb 202000:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2020-3924: Improper Neutralization of Special Elements used in a Command	27 Feb 202000:00	–	rapid7

NVD

Node

AND

tonnet tat-77104g1_firmwareRange≤tat-77104g1_20190107

tonnet tat-77104g1Match-

Node

AND

tonnet tat-70432n_firmwareRange≤tat-77208g1_20181225

tonnet tat-70432nMatch-

Node

AND

tonnet tat-71416g1_firmwareRange≤tat-71416g1_20181225

tonnet tat-71416g1Match-

Node

AND

tonnet tat-71832g1_firmwareRange≤tat-71832g1_20190510

tonnet tat-71832g1Match-

Node

AND

tonnet tat-76104g3_firmwareRange≤20181220_76104g3

tonnet tat-76104g3Match-

Node

AND

tonnet tat-76108g3_firmwareRange≤20181221_76208g3

tonnet tat-76108g3Match-

Node

AND

tonnet tat-76116g3_firmwareRange≤20181221_76216g3

tonnet tat-76116g3Match-

Node

AND

tonnet tat-76132g3_firmwareRange≤tat-70832g3_20181221-1

tonnet tat-76132g3Match-

[
  {
    "platforms": [
      "TAT-76 series"
    ],
    "product": "DVR",
    "vendor": "TONNET",
    "versions": [
      {
        "lessThanOrEqual": "20191216",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "TAT-77 series"
    ],
    "product": "DVR",
    "vendor": "TONNET",
    "versions": [
      {
        "lessThanOrEqual": "20200213",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
tvn	www.tvn.twcert.org.tw/taiwanvn/TVN-201910004
chtsecurity	www.chtsecurity.com/news/4ef5eb3a-fdc3-4d78-8dd7-ec7213e2bbcf

17 Jun 2026 03:19Current

8.2High risk

Vulners AI Score8.2

CVSS 3.16.4 - 9.8

CVSS 210

EPSS0.01258

CWE-77