CVE-2024-3721

🗓️ 13 Apr 2024 12:00:04Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 36 Media mentions👁 288 Views🌐 WEB

Vulnerability in TBK DVR-4104 and DVR-4216 with critical os command injectio

Reporter	Title	Published	Views	Family All 21
attackerkb	CVE-2024-3721	13 Apr 202400:00	–	attackerkb
BDU FSTEC	The vulnerability of the microprogrammed software of TBK DVR4104 and TBK DVR4216 devices lies in the lack of measures to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands or cause malfunctions in the device.	9 Jun 202500:00	–	bdu_fstec
Circl	CVE-2024-3721	12 May 202407:03	–	circl
CNNVD	TBK DVR-4104、DVR-4216 操作系统命令注入漏洞	13 Apr 202400:00	–	cnnvd
Cvelist	CVE-2024-3721 TBK DVR-4104/DVR-4216 os command injection	13 Apr 202412:00	–	cvelist
NVD	CVE-2024-3721	13 Apr 202412:15	–	nvd
OpenVAS	TBK DVR devices OS Command Injection Vulnerability (Apr 2024) - Active Check	7 May 202400:00	–	openvas
Positive Technologies	PT-2024-27378	13 Apr 202400:00	–	ptsecurity
Qualys Blog	What Security Teams Need to Know as PHP and IoT Exploits Surge	30 Oct 202512:35	–	qualysblog
Rapid7 Vulnerability Database (full)	CVE-2024-3721: Improper Neutralization of Special Elements used in an OS Command	13 Apr 202400:00	–	rapid7

Vulners

Node

tbkvision tbk-dvr4104Match20240412

tbkvision tbk-dvr4216Match20240412

[
  {
    "vendor": "TBK",
    "product": "DVR-4104",
    "versions": [
      {
        "version": "20240412",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "TBK",
    "product": "DVR-4216",
    "versions": [
      {
        "version": "20240412",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/netsecfish/tbk_dvr_command_injection
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
cmd	query param	/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___	OS command injection via the cmd parameter; manipulation of the mdb/mdc argument leads to remote command execution.	CWE-78

17 Jun 2026 07:44Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.16.3

CVSS 36.3

CVSS 26.5

EPSS0.86489

SSVC