Description
A command injection vulnerability exists that can be exploited after authentication in VIGI NVR1104H-4P V1 and VIGI NVR2016H-16MP V2.This issue affects VIGI NVR1104H-4P V1: before 1.1.5 Build 250518; VIGI NVR2016H-16MP V2: before 1.3.1 Build 250407.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TP-Link Systems | VIGI NVR1104H-4P V1 | < 1.1.5 Build 250518 | 1.1.5 Build 250518 |
| TP-Link Systems | VIGI NVR2016H-16MP V2 | < 1.3.1 Build 250407 | 1.3.1 Build 250407 |