Riskcovery

CVE-2024-43778

State
Published
Severity
8.8 High
Published
Sep 18, 2024
Updated
Sep 18, 2024
Reserved
Sep 17, 2024

Read the record on cve.org

Description

OS command injection vulnerability in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCISA-ADP

Weaknesses

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected Products

ProductVersions
HDVR-400TAKENAKA ENGINEERING CO., LTD.
  • prior to 46110.1.100869.65Affected
HDVR-800TAKENAKA ENGINEERING CO., LTD.
  • prior to 53210.1.900103.65Affected
HDVR-1600TAKENAKA ENGINEERING CO., LTD.
  • prior to 53310.1.900111.65Affected
AHD04T-ATAKENAKA ENGINEERING CO., LTD.
  • prior to 7xx10.1.900055.65Affected
AHD08T-ATAKENAKA ENGINEERING CO., LTD.
  • prior to 7xx10.1.900055.65Affected
AHD16T-ATAKENAKA ENGINEERING CO., LTD.
  • prior to 7xx10.1.900055.65Affected
NVR04T-ATAKENAKA ENGINEERING CO., LTD.
  • prior to 56x10.1.100540.65Affected
NVR08T-ATAKENAKA ENGINEERING CO., LTD.
  • prior to 56x10.1.100540.65Affected
NVR16T-ATAKENAKA ENGINEERING CO., LTD.
  • prior to 49310.1.100540.65Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.