Description
Improper authentication vulnerability in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TAKENAKA ENGINEERING | HDVR-400 | prior to 46110.1.100869.65 | — |
| TAKENAKA ENGINEERING | HDVR-800 | prior to 53210.1.900103.65 | — |
| TAKENAKA ENGINEERING | HDVR-1600 | prior to 53310.1.900111.65 | — |
| TAKENAKA ENGINEERING | AHD04T-A | prior to 7xx10.1.900055.65 | — |
| TAKENAKA ENGINEERING | AHD08T-A | prior to 7xx10.1.900055.65 | — |
| TAKENAKA ENGINEERING | AHD16T-A | prior to 7xx10.1.900055.65 | — |
| TAKENAKA ENGINEERING | NVR04T-A | prior to 56x10.1.100540.65 | — |
| TAKENAKA ENGINEERING | NVR08T-A | prior to 56x10.1.100540.65 | — |
| TAKENAKA ENGINEERING | NVR16T-A | prior to 49310.1.100540.65 | — |