PT-2024-29618 · Nvr · Nvr

Published 2024-12-24 · Updated 2025-10-01 · CVE-2024-41887

Positive Technologies (AI Summary)

CVSS v4.0

5.1

Medium

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions NVR (affected versions not specified)

Description A flaw has been discovered that allows for remote code execution on the NVR. An attacker can create an NVR log file in a directory one level higher on the system, which can be used to corrupt files in the directory. The manufacturer has released patch firmware for the flaw.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

RCE

Weakness Enumeration

CWE-22

CWE-20

Related Identifiers

CVE-2024-41887

Affected Products

Nvr

References · 6

• https://hanwhavision.com/wp-content/uploads/2024/12/NVR-Vulnerability-Report-CVE-2024-4188241887.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-41887 · Security Note
• https://twitter.com/CVEnew/status/1871433210854268937 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1871449454244466839 · Twitter Post
• https://t.me/cveNotify/137029 · Telegram Post
• https://t.me/cvedetector/13561 · Telegram Post