Description (CNA)
Certain models of NVR developed by Digiever has an OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Digiever / DS-1200 | affected 0 through *.*.*.78 |
| Digiever / DS-2100 Pro | affected 0 through *.*.*.78 |
| Digiever / DS-2100 Pro+ | affected 0 through *.*.*.78 |
| Digiever / DS-2100 UHD | affected 0 through *.*.*.78 |
| Digiever / DS-2200 UHD | affected 0 through *.*.*.78 |
| Digiever / DS-2200 UHD+ | affected 0 through *.*.*.78 |
| Digiever / DS-4200 Pro | affected 0 through *.*.*.78 |
| Digiever / DS-4200 Pro+ | affected 0 through *.*.*.78 |
| Digiever / DS-4200 UHD | affected 0 through *.*.*.78 |
| Digiever / DS-4200 UHD+ | affected 0 through *.*.*.78 |
| Digiever / DS-4100-RM | affected 0 through *.*.*.78 |
| Digiever / DS-4200-RM Pro+ | affected 0 through *.*.*.78 |
| Digiever / DS-4200-RM UHD | affected 0 through *.*.*.78 |
| Digiever / DS-8x00-RM Pro+ | affected 0 through *.*.*.78 |
| Digiever / DS-8x00-SRM Pro+ | affected 0 through *.*.*.78 |
| Digiever / DS-8x00-RM UHD | affected 0 through *.*.*.78 |
| Digiever / DS-16x00-RM Pro+ | affected 0 through *.*.*.78 |
| Digiever / DS-16x00-RM UHD | affected 0 through *.*.*.78 |
CWE
CWE-78
References
- https://www.twcert.org.tw/tw/cp-132-10375-19f1e-1.html
- https://www.twcert.org.tw/en/cp-139-10376-a057c-2.html
ADP enrichment
No English description supplied.
No references supplied.