Description
An OS command injection issue exists in multiple versions of TB-eye network recorders and AHD recorders. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who is logging in to the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TB-eye | XRN-410SN/TE | firmware versions Ver2.47b_220119153805 and earlier | — |
| TB-eye | XRN-810SN/TE | firmware versions Ver2.47b_220119153805 and earlier | — |
| TB-eye | XRN-1610SN/TE | firmware versions Ver2.47b_210516234524 and earlier | — |
| TB-eye | PRN-4011N/TE | firmware versions Ver2.51p_231208081715 and earlier | — |
| TB-eye | HRX-421FN/TE | firmware versions Ver3.05.62 and earlier | — |
| TB-eye | HRX-821/TE | firmware versions Ver3.05.62 and earlier | — |
| TB-eye | HRX-1621/TE | firmware versions Ver3.05.62 and earlier | — |
| TB-eye | HRX-435FN/TE | firmware versions Ver5.31.72 and earlier | — |
| TB-eye | HRX-835/TE | firmware versions Ver5.31.72 and earlier | — |
| TB-eye | HRX-1635/TE | firmware versions Ver5.31.72 and earlier | — |
| TB-eye | XRN-425SFN/TE | firmware versions Ver5.31.32 and earlier | — |
| TB-eye | XRN-426S | firmware versions Ver5.33.12 and earlier | — |
| TB-eye | XRN-820S/TE | firmware versions Ver5.34.12 and earlier | — |
| TB-eye | XRN-1620S/TE | firmware versions Ver5.34.12 and earlier | — |
| TB-eye | XRN-3210R/TE | firmware versions Ver5.34.12 and earlier | — |
| TB-eye | XRN-6410R/TE | firmware versions Ver5.34.12 and earlier | — |
| TB-eye | XRN-6410DR/TE | firmware versions Ver5.34.12 and earlier | — |