Skip to content
OpenAdvisories
Unscored CVE-2022-35733 EUVD-2022-38607GHSA-qrqm-fhg8-7274

Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders (UDR-JA1004/JA1008/JA1016 firmware v…

Published Aug 23, 2022 · Updated Aug 3, 2024 · Assigned by jpcert

Vendor: UNIMO Technology Product: UNIMO Technology digital video recorders UDR-JA1004/JA1008/JA1016 and UDR-JA1016

Description

Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders (UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier) allows a remote unauthenticated attacker to execute an arbitrary OS command by sending a specially crafted request to the affected device web interface.

Affected products

VendorProductAffectedFixed
UNIMO Technology UNIMO Technology digital video recorders UDR-JA1004/JA1008/JA1016 and UDR-JA1016 UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier —

References