PT-2024-29618

Name of the Vulnerable Software and Affected Versions NVR affected versions not specified Description A flaw has been discovered that allows for remote code execution on the NVR. An attacker can create an NVR log file in a directory one level higher on the system, which can be used to corrupt fil...

PT-2024-29613 · Nvr · Nvr

Name of the Vulnerable Software and Affected Versions: NVR affected versions not specified Description: A flaw in the NVR allows for remote code execution. An attacker can cause a stack overflow by entering large data into URL parameters, which will result in a system reboot. The estimated number...

PT-2024-29617

Name of the Vulnerable Software and Affected Versions NVR affected versions not specified Description A flaw has been found that allows for remote code execution on the NVR. An attacker could inject malformed data into URL input parameters, such as url input parameters, to reboot the NVR. The...

PT-2024-29614 · Nvr · Nvr

Name of the Vulnerable Software and Affected Versions: NVR affected versions not specified Description: A flaw in the NVR allows for remote code execution. An attacker can enter a special value for a specific URL parameter, resulting in a NULL pointer reference and a reboot of the NVR. The...

Hanwha Vision NVR 安全漏洞

Hanwha Vision NVR is a series of network video recorder devices from Hanwha Vision, a South Korean company. A security vulnerability exists in Hanwha Vision NVR that stems from a NULL pointer reference issue when handling specific URL parameters, which can cause the NVR to reboot when an attacker...

Hanwha Vision NVR 安全漏洞

Hanwha Vision NVR is a series of network video recorder devices from Hanwha Vision, a South Korean company. A security vulnerability exists in Hanwha Vision NVR that stems from a URL input parameter in which malformed data can be injected to reboot the NVR, leading to remote code execution...

Mercury MNVR816 安全漏洞

Mercury MNVR816 is a network DVR from Mercury China. A security vulnerability exists in Mercury MNVR816 version 2.0.1.0.5 and prior versions. An attacker could exploit the vulnerability to access directories or files...

D-Link多款产品 命令注入漏洞

D-Link DNR-322L and others are products of China AUO D-Link.D-Link DNR-322L is a network video recorder.D-Link DNS-325 is a NAS Network Attached Storage device.D-Link DNS-120 is a network storage adapter. A command injection vulnerability exists in various D-Link products. The vulnerability stems...

D-Link多款产品 安全漏洞

D-Link DNS Series and D-Link DNR Series are both products of China-based D-Link Corporation.D-Link DNS Series is a series of NAS network storage devices.D-Link DNR Series is a series of network video recorders. A security vulnerability exists in several D-Link products. The vulnerability stems fr...

Dahua NVR 安全漏洞

Dahua NVR is a series of network video recorders from Dahua China. A security vulnerability exists in the Dahua NVR4XXXIPC-HX8XXX, which stems from the fact that an attacker can send a crafted packet to a vulnerable interface, causing the device to crash...

Dahua NVR 安全漏洞

Dahua NVR is a series of network video recorders from Dahua China. A security vulnerability exists in the Dahua NVR4XXX. After obtaining the administrator username and password, an attacker can send carefully constructed packets to the vulnerable interface, causing the device to crash...

Dahua NVR 安全漏洞

Dahua NVR is a series of network video recorders from Dahua China. A security vulnerability exists in the Dahua NVR4XXX IPC-HX8XXX. An attacker can send a carefully constructed packet to the vulnerable interface to initiate device initialization...

Dahua NVR 安全漏洞

Dahua NVR is a series of network video recorders from Dahua China. A security vulnerability exists in the Dahua NVR4XXX. After obtaining a common username and password, an attacker can send a carefully constructed packet to the vulnerable interface, causing the device to crash...

Longse NVR Security Vulnerability

Longse NVR is a series of network video recorders from China-based Longse Technology Longse. A security vulnerability exists in the Longse NVR that stems from transmitting a user's login and password to a remote control service without the use of any encryption, allowing an attacker to eavesdrop ...

Longse NVR Security Vulnerability

Longse NVR is a series of network video recorders from China-based Longse Technology Longse. A security vulnerability exists in Longse NVR, which stems from the fact that the product creates a WiFi network with a default password, which is likely to remain unchanged as cameras in the same suite...

Uniview NVR301-04S2-P4 (Update A)

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 5.1 ATTENTION : Exploitable remotely/low attack complexity/public exploits available Vendor : Uniview Equipment : NVR301-04S2-P4 Vulnerability : Cross-site Scripting 2. RISK EVALUATION An attacker could send a user a URL that if clicked on could execute...

CVE-2023-51625

D-Link DCS-8300LHV2 ONVIF SetSystemDateAndTime Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP cameras. Although authentication is required to exploit this...

Hanwha Vision NVR和DVR 安全漏洞

Hanwha Vision NVR and Hanwha Vision DVR are both products of Hanwha Vision, a South Korean company.Hanwha Vision NVR is a series of network video recorder devices.Hanwha Vision DVR is a series of digital video recorder devices. Hanwha Vision NVRs and DVRs are vulnerable to a security flaw that...

Hikvision DS-76xxNI-Mx、DS-77xxNI-Mx、DS-96xxxNI-Mxx 安全漏洞

Hikvision DS-76xxNI-Mx and others are a network video recorder from Hikvision, a Chinese company. A security vulnerability exists in the Hikvision DS-76xxNI-Mx, DS-77xxNI-Mx, DS-96xxxNI-Mxx versions prior to V5.02.006, which originates from a vulnerability that allows an authenticated user with...

Hikvision DS-7604NI-K1 安全漏洞

The Hikvision DS-7604NI-K1 is a network video recorder from Hikvision China. A security vulnerability exists in the Hikvision DS-7604NI-K1 V4.76.005 build23101 and earlier versions, which originates from a vulnerability that allows an authenticated attacker to cause a service exception by sending...