PT-2024-14881 · Dvr · Dvr

Published 2024-04-26 · Updated 2024-04-26 · CVE-2023-6095

Positive Technologies (AI Summary)

CVSS v3.1

8.9

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:H

Name of the Vulnerable Software and Affected Versions DVR (affected versions not specified)

Description A flaw has been discovered that allows for remote code execution on the DVR. An attacker could inject malicious HTTP headers into request packets to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2023-6095

Affected Products

Dvr

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-6095 · Security Note
• https://twitter.com/VulmonFeeds/status/1783812798230741356 · Twitter Post
• https://t.me/cvenotify/78106 · Telegram Post
• https://t.me/cvenotify/78107 · Telegram Post
• https://hanwhavision.com/wp-content/uploads/2024/04/NVR-DVR-Vulnerability-Report-CVE-2023-6095-6096.pdf · Note