CVE-2024-43778
High
Description
OS command injection vulnerability in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings.
SeverityHigh
CVSS8.8
Exploit probability—
ProductHDVR-400
PublishedSep 18, 2024
First seenSep 18, 2024
Weakness typeCWE-78OS command injection
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| TAKENAKA ENGINEERING CO., LTD. HDVR-400 | prior to 46110.1.100869.65 | — |
| TAKENAKA ENGINEERING CO., LTD. HDVR-800 | prior to 53210.1.900103.65 | — |
| TAKENAKA ENGINEERING CO., LTD. HDVR-1600 | prior to 53310.1.900111.65 | — |
| TAKENAKA ENGINEERING CO., LTD. AHD04T-A | prior to 7xx10.1.900055.65 | — |
| TAKENAKA ENGINEERING CO., LTD. AHD08T-A | prior to 7xx10.1.900055.65 | — |
| TAKENAKA ENGINEERING CO., LTD. AHD16T-A | prior to 7xx10.1.900055.65 | — |
| TAKENAKA ENGINEERING CO., LTD. NVR04T-A | prior to 56x10.1.100540.65 | — |
| TAKENAKA ENGINEERING CO., LTD. NVR08T-A | prior to 56x10.1.100540.65 | — |
| TAKENAKA ENGINEERING CO., LTD. NVR16T-A | prior to 49310.1.100540.65 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.