CVE-2025-34043

A remote command injection vulnerability exists in Vacron Network Video Recorder NVR devices v1.4 due to improper input sanitization in the board.cgi script. The vulnerability allows unauthenticated attackers to pass arbitrary commands to the underlying operating system via crafted HTTP requests...

PT-2025-26992

Name of the Vulnerable Software and Affected Versions: Vacron Network Video Recorder NVR devices version 1.4 Description: A remote command injection issue exists due to improper input sanitization in the board.cgi script. This allows unauthenticated attackers to pass arbitrary commands to the...

Vacron Network Video Recorder 安全漏洞

Vacron Network Video Recorder is a webcam from Vacron Corporation of Taiwan, China. A security vulnerability exists in Vacron Network Video Recorder v1.4, which stems from improperly cleaned inputs to the board.cgi script, which could lead to remote command execution...

Vacron NVR Device Remote Command Execution Vulnerability

Vacron is mainly engaged in the production of all kinds of mobile surveillance, CCTV surveillance system, IP remote image monitoring system and other related products, and is able to accept customized orders such as ODM and OEM. Main products: Car Recorder, CCTV Analog Surveillance System, CMS, I...