CVE-2021-41506
Description
Xiaongmai AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, HI3518_50H10L_S39 V4.02.R11.7601.Nat.Onvif.20170420, V4.02.R11.Nat.Onvif.20160422, V4.02.R11.7601.Nat.Onvif.20170424, V4.02.R11.Nat.Onvif.20170327, V4.02.R11.Nat.Onvif.20161205, V4.02.R11.Nat.20170301, V4.02.R12.Nat.OnvifS.20170727 is affected by a backdoor in the macGuarder and dvrHelper binaries of DVR/NVR/IP camera firmware due to static root account credentials in the system.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xiongmaitech ahb7008t-mh-v2_firmware | 4.02.r11.7601.nat.onvif.20170420 | — |
| xiongmaitech ahb7804r-els_firmware | 4.02.r11.nat.onvif.20160422 | — |
| xiongmaitech ahb7804r-mh-v2_firmware | 4.02.r11.7601.nat.onvif.20170424 | — |
| xiongmaitech ahb7808r-ms-v2_firmware | 4.02.r11.nat.onvif.20170327 | — |
| xiongmaitech ahb7808r-ms_firmware | 4.02.r11.nat.onvif.20160328 | — |
| xiongmaitech ahb7808t-ms-v2_firmware | 4.02.r11.nat.onvifc.20161205 | — |
| xiongmaitech ahb7804r-lms_firmware | 4.02.r11.nat.20170301 | — |
| xiongmaitech hi3518e_50h10l_s39_firmware | 4.02.r12.nat.onvifs.20170727 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.