Description
The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Digital Watchdog | VMAX A1 G4 DVR | All | — |
| Digital Watchdog | VMAX IP G4 NVR | All | — |
| Digital Watchdog | VMAX A1 PLUS | All | — |
| Digital Watchdog | VA1G4 Recorder | All | — |
| Digital Watchdog | VG4 Recorder | All | — |
Advisories 1
- ICSA-26-258-01 Digital Watchdog VMAX DVR and NVR Product Lineups CISA ICS & IT advisories · Sep 15, 2026