CVE-2024-22770

2024-01-2305:15:09

CWE-20

CWE-798

[email protected]

web.nvd.nist.gov

input validation

hitron systems dvr

network attack

default credentials

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

16.0%

JSON

Improper Input Validation in Hitron Systems DVR HVR-16781 1.03~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.

Affected configurations

Nvd

Node

hitron_systemsdvr_hvr-4781_firmwareRange1.03–4.02

AND

hitron_systemsdvr_hvr-4781Match-

VendorProductVersionCPE
hitron_systemsdvr_hvr-4781_firmware*cpe:2.3:o:hitron_systems:dvr_hvr-4781_firmware:*:*:*:*:*:*:*:*
hitron_systemsdvr_hvr-4781-cpe:2.3:h:hitron_systems:dvr_hvr-4781:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hitron_systems	dvr_hvr-4781_firmware	*	cpe:2.3:o:hitron_systems:dvr_hvr-4781_firmware::::::::
hitron_systems	dvr_hvr-4781	-	cpe:2.3:h:hitron_systems:dvr_hvr-4781:-:::::::*