Description (CNA)
DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET do not properly verify patch files. Attackers can inject a specific command into a patch file and gain access to the system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| TONNET / DVR | affected 0 through 20191216 |
| TONNET / DVR | affected 0 through 20200213 |
CWE
No CWE identifiers supplied.
References
- https://www.chtsecurity.com/news/4ef5eb3a-fdc3-4d78-8dd7-ec7213e2bbcf
- https://tvn.twcert.org.tw/taiwanvn/TVN-201910004
ADP enrichment
No English description supplied.