29 matches found
CVE-2026-87827
Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without requiring authentication. A remote unauthenticated attacker with network access to the affected service can execute arbitrary system commands on the device, potential...
EUVD-2026-74805
Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without requiring authentication. A remote unauthenticated attacker with network access to the affected service can execute arbitrary system commands on the device, potential...
CVE-2026-87827 KGUARD DVR unauthenticated remote command execution vulnerability
Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without requiring authentication. A remote unauthenticated attacker with network access to the affected service can execute arbitrary system commands on the device, potential...
CVE-2026-87827 KGUARD DVR unauthenticated remote command execution vulnerability
Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without requiring authentication. A remote unauthenticated attacker with network access to the affected service can execute arbitrary system commands on the device, potential...
CVE-2026-87827
Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without authentication. A remote unauthenticated attacker with network access can execute arbitrary system commands, potentially leading to a complete compromise of the DVR. ...
CVE-2026-87827: Initialization of a Resource with an Insecure Default
Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without requiring authentication. A remote unauthenticated attacker with network access to the affected service can execute arbitrary system commands on the device, potential...
PT-2026-88938
Name of the Vulnerable Software and Affected Versions KGUARD DVR versions prior to 2017 Description Certain DVR devices expose a system command execution service on all network interfaces without requiring authentication. A remote unauthenticated attacker with network access to this service can...
VulnCheck KEV: CVE-2026-87827
Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without requiring authentication. A remote unauthenticated attacker with network access to the affected service can execute arbitrary system commands on the device, potential...
EUVD-2015-4484
Malware in sbrugna...
Unauthorized Access Vulnerability in KGuard DVRs
KGuard has been actively creating an integrated platform for smart grid surveillance and has been carefully managing its own brand, KGuard, for many years, and its main products include the Home Security ComboKit, a DIY kit for digital surveillance video recorders. An unauthorized access...
New Mirai-Inspired Botnet Could Be Using Your KGUARD DVRs in Cyber Attacks
Cybersecurity researchers on Thursday revealed details about a new Mirai-inspired botnet called "miraiptea" that leverages an undisclosed vulnerability in digital video recorders DVR provided by KGUARD to propagate and carry out distributed denial-of-service DDoS attacks. Chinese security firm...
VulnCheck KEV: CVE-2015-4464
Kguard Digital Video Recorder 104, 108, v2 does not have any authorization or authentication between an ActiveX client and the application server...
Multiple Vulnerabilities in Kguard Digital Video Recorder
The Kguard Digital Video Recorder DVR is a digital hard disk recorder from Kguard. Kguard DVR suffers from security bypass, information disclosure, denial of service, and command injection vulnerabilities. An attacker can exploit these vulnerabilities to execute arbitrary commands in the context ...
CVE-2015-4464
Kguard Digital Video Recorder 104, 108, v2 does not have any authorization or authentication between an ActiveX client and the application server...
Authentication flaw
Kguard Digital Video Recorder 104, 108, v2 does not have any authorization or authentication between an ActiveX client and the application server...
CVE-2015-4464
Kguard Digital Video Recorders (models KG-SHA104 , KG-SHA108 , and v2 ) are vulnerable to a remote authentication bypass due to a deficiency in handling authentication and authorization. While the ActiveX component employs password-based authentication for the login page, communication to the app...
CVE-2015-4464
Kguard Digital Video Recorder 104, 108, v2 does not have any authorization or authentication between an ActiveX client and the application server...
CVE-2015-4464: Improper Authentication
Kguard Digital Video Recorder 104, 108, v2 does not have any authorization or authentication between an ActiveX client and the application server...
Kguard Digital Video Recorder Command Injection Vulnerability
The Kguard Digital Video Recorder DVR is a digital hard disk recorder from Kguard. A command injection vulnerability exists in Kguard Digital Video Recorder. An attacker could use this vulnerability to execute arbitrary commands within the context of an affected application...