EUVD-2013-7245

Malware in sbrugna...

Multiple Swann Product Injection Vulnerabilities

The Swann DVR04B and others are a digital video recorder from Swann USA. An injection vulnerability exists in the raysharpdvr application in several Swann products, which can be exploited by remote attackers to execute arbitrary code via TCP port 9000...

Code injection

On Swann DVR04B, DVR08B, DVR-16CIF, and DVR16B devices, raysharpdvr application has a vulnerable call to “system”, which allows remote attackers to execute arbitrary code via TCP port 9000...

CVE-2013-7487

On Swann DVR04B, DVR08B, DVR-16CIF, and DVR16B devices, raysharpdvr application has a vulnerable call to “system”, which allows remote attackers to execute arbitrary code via TCP port 9000...

CVE-2013-7487

The CVE-2013-7487 entry concerns Swann DVR04B, DVR08B, DVR-16CIF, and DVR16B devices where the raysharpdvr application's vulnerable call to system enables remote code execution over TCP port 9000. Documented impact indicates attacker-controlled arbitrary code execution with network access; CVSS 3...

CVE-2013-7487: Improper Neutralization of Special Elements in Output Used by a Downstream Component

On Swann DVR04B, DVR08B, DVR-16CIF, and DVR16B devices, raysharpdvr application has a vulnerable call to “system”, which allows remote attackers to execute arbitrary code via TCP port 9000...