Lucene search

KrcertCVELIST:CVE-2024-22772

HistoryJan 23, 2024 - 4:52 a.m.

CVE-2024-22772 Hitron Systems DVR LGUVR-8H Improper Input Validation Vulnerability

2024-01-2304:52:06

CWE-20

krcert

www.cve.org

improper input validation

hitron systems dvr

lguvr-8h

network attack

default credentials

7.4 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

0.0005 Low

EPSS

Percentile

16.0%

JSON

Improper Input Validation in Hitron Systems DVR LGUVR-8H 1.02~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "DVR LGUVR-8H",
    "vendor": "Hitron Systems",
    "versions": [
      {
        "changes": [
          {
            "at": "4.03",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "4.02",
        "status": "affected",
        "version": "1.02",
        "versionType": "custom"
      }
    ]
  }
]

References

www.hitron.co.kr/firmware/

7.4 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

0.0005 Low

EPSS

Percentile

16.0%

JSON

Related for CVELIST:CVE-2024-22772