Dahua Security Network Video Recorders Improper Input Validation (CVE-2024-39947)

A vulnerability has been found in Dahua products.After obtaining the ordinary user's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing the device to crash. This plugin only works with Tenable.ot. Please visit...

Dahua Security Network Video Recorders Improper Input Validation (CVE-2024-39946)

A vulnerability has been found in Dahua products.After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing device initialization. This plugin only works with Tenable.ot. Please visit...

Dahua Security Network Video Recorders Improper Input Validation (CVE-2024-39948)

A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Dahua Security Network Video Recorders Improper Input Validation (CVE-2024-39949)

A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Digiever DS-2105 Pro 安全漏洞

The Digiever DS-2105 Pro is a network video recorder from Digiever. A security vulnerability exists in the Digiever DS-2105 Pro version 3.1.0.71-11, which stems from allowing timetzsetup.cgi command injection...

Digiever DS-2105 Pro 安全漏洞

The Digiever DS-2105 Pro is a network video recorder from Digiever. A security vulnerability exists in Digiever DS-2105 Pro version 3.1.0.71-11. An attacker can exploit the vulnerability to read arbitrary files...

CP Plus CP-VNR-3104 安全漏洞

The CP Plus CP-VNR-3104 is a network video recorder from CP Plus. A security vulnerability exists in CP Plus CP-VNR-3104 version B3223P22C02424. An attacker could exploit this vulnerability to obtain an EC private key and access sensitive data or perform a man-in-the-middle attack...

PT-2024-29613 · Nvr · Nvr

Name of the Vulnerable Software and Affected Versions: NVR affected versions not specified Description: A flaw in the NVR allows for remote code execution. An attacker can cause a stack overflow by entering large data into URL parameters, which will result in a system reboot. The estimated number...

Hanwha Vision NVR 安全漏洞

Hanwha Vision NVR is a series of network video recorder devices from Hanwha Vision, a South Korean company. A security vulnerability exists in Hanwha Vision NVR that stems from a NULL pointer reference issue when handling specific URL parameters, which can cause the NVR to reboot when an attacker...

PT-2024-29617 · Nvr · Nvr

Name of the Vulnerable Software and Affected Versions: NVR affected versions not specified Description: A flaw has been found that allows for remote code execution on the NVR. An attacker could inject malformed data into URL input parameters, such as url input parameters, to reboot the NVR. The...

Hanwha Vision NVR 安全漏洞

Hanwha Vision NVR is a series of network video recorder devices from Hanwha Vision, a South Korean company. A security vulnerability exists in Hanwha Vision NVR that stems from a URL input parameter in which malformed data can be injected to reboot the NVR, leading to remote code execution...

PT-2024-29614 · Nvr · Nvr

Name of the Vulnerable Software and Affected Versions: NVR affected versions not specified Description: A flaw in the NVR allows for remote code execution. An attacker can enter a special value for a specific URL parameter, resulting in a NULL pointer reference and a reboot of the NVR. The...

PT-2024-29618 · Nvr · Nvr

Name of the Vulnerable Software and Affected Versions: NVR affected versions not specified Description: A flaw has been discovered that allows for remote code execution on the NVR. An attacker can create an NVR log file in a directory one level higher on the system, which can be used to corrupt...

Mercury MNVR816 安全漏洞

Mercury MNVR816 is a network DVR from Mercury China. A security vulnerability exists in Mercury MNVR816 version 2.0.1.0.5 and prior versions. An attacker could exploit the vulnerability to access directories or files...

D-Link多款产品 命令注入漏洞

D-Link DNR-322L and others are products of China AUO D-Link.D-Link DNR-322L is a network video recorder.D-Link DNS-325 is a NAS Network Attached Storage device.D-Link DNS-120 is a network storage adapter. A command injection vulnerability exists in various D-Link products. The vulnerability stems...

D-Link多款产品 安全漏洞

D-Link DNS Series and D-Link DNR Series are both products of China-based D-Link Corporation.D-Link DNS Series is a series of NAS network storage devices.D-Link DNR Series is a series of network video recorders. A security vulnerability exists in several D-Link products. The vulnerability stems fr...

Dahua NVR 安全漏洞

Dahua NVR is a series of network video recorders from Dahua China. A security vulnerability exists in the Dahua NVR4XXX. After obtaining the administrator username and password, an attacker can send carefully constructed packets to the vulnerable interface, causing the device to crash...

Dahua NVR 安全漏洞

Dahua NVR is a series of network video recorders from Dahua China. A security vulnerability exists in the Dahua NVR4XXX. After obtaining a common username and password, an attacker can send a carefully constructed packet to the vulnerable interface, causing the device to crash...

Dahua NVR 安全漏洞

Dahua NVR is a series of network video recorders from Dahua China. A security vulnerability exists in the Dahua NVR4XXX IPC-HX8XXX. An attacker can send a carefully constructed packet to the vulnerable interface to initiate device initialization...

Dahua NVR 安全漏洞

Dahua NVR is a series of network video recorders from Dahua China. A security vulnerability exists in the Dahua NVR4XXXIPC-HX8XXX, which stems from the fact that an attacker can send a crafted packet to a vulnerable interface, causing the device to crash...