Me9187

**Name of the Vulnerable Software and Affected Versions** QVIS NVR DVR versions prior to 2021-12-13 **Description** The issue allows for Remote Code Execution via Java deserialization. **Recommendations** For versions prior to 2021-12-13, update to a version released after 2021-12-13 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** QVIS NVR DVR versions prior to 2021-12-13 **Description** The issue allows an attacker to escalate privileges from a `qvisdvr` user to the `root` user by exploiting a Sudo misconfiguration. **Recommendations** For versions prior to 2021-12-13, update to a version released after 2021-12-13 to resolve the issue.