Lucene search

[email protected]CVE-2021-41506

HistoryJun 30, 2022 - 1:15 p.m.

CVE-2021-41506

2022-06-3013:15:08

CWE-287

[email protected]

web.nvd.nist.gov

cve-2021-41506

security

vulnerability

xiaongmai

ahb7008t

ahb7804r

backdoor

dvr

nvr

ip camera

firmware

root credentials

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

68.0%

JSON

Xiaongmai AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, HI3518_50H10L_S39 V4.02.R11.7601.Nat.Onvif.20170420, V4.02.R11.Nat.Onvif.20160422, V4.02.R11.7601.Nat.Onvif.20170424, V4.02.R11.Nat.Onvif.20170327, V4.02.R11.Nat.Onvif.20161205, V4.02.R11.Nat.20170301, V4.02.R12.Nat.OnvifS.20170727 is affected by a backdoor in the macGuarder and dvrHelper binaries of DVR/NVR/IP camera firmware due to static root account credentials in the system.

Affected configurations

NVD

Node

xiongmaitechahb7008t-mh-v2Match-

AND

xiongmaitechahb7008t-mh-v2_firmwareMatch4.02.r11.7601.nat.onvif.20170420

Node

xiongmaitechahb7804r-elsMatch-

AND

xiongmaitechahb7804r-els_firmwareMatch4.02.r11.nat.onvif.20160422

Node

xiongmaitechahb7804r-mh-v2Match-

AND

xiongmaitechahb7804r-mh-v2_firmwareMatch4.02.r11.7601.nat.onvif.20170424

Node

xiongmaitechahb7808r-ms-v2Match-

AND

xiongmaitechahb7808r-ms-v2_firmwareMatch4.02.r11.nat.onvif.20170327

Node

xiongmaitechahb7808r-msMatch-

AND

xiongmaitechahb7808r-ms_firmwareMatch4.02.r11.nat.onvif.20160328

Node

xiongmaitechahb7808t-ms-v2Match-

AND

xiongmaitechahb7808t-ms-v2_firmwareMatch4.02.r11.nat.onvifc.20161205

Node

xiongmaitechahb7804r-lmsMatch-

AND

xiongmaitechahb7804r-lms_firmwareMatch4.02.r11.nat.20170301

Node

xiongmaitechhi3518e_50h10l_s39Match-

AND

xiongmaitechhi3518e_50h10l_s39_firmwareMatch4.02.r12.nat.onvifs.20170727

CPENameOperatorVersion
xiongmaitech:ahb7008t-mh-v2_firmwarexiongmaitech ahb7008t-mh-v2 firmwareeq4.02.r11.7601.nat.onvif.20170420

CPE	Name	Operator	Version
xiongmaitech:ahb7008t-mh-v2_firmware	xiongmaitech ahb7008t-mh-v2 firmware	eq	4.02.r11.7601.nat.onvif.20170420

References

github.com/Snawoot/hisilicon-dvr-telnet

github.com/tothi/hs-dvr-telnet

habr.com/en/post/486856/

www.xiongmaitech.com/en/index.php/news/info/12/68

Social References

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

68.0%

JSON

Related for CVE-2021-41506

prion1 cvelist1 nvd1