PT-2024-30649 · Takenaka Engineering Co. · Digital Video Recorders

Masaki Kubo + 3 · Published 2024-09-17 · Updated 2024-09-20 · CVE-2024-43778

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TAKENAKA ENGINEERING CO., LTD. digital video recorders (affected versions not specified)

Description The issue allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings. This is an OS command injection vulnerability in multiple digital video recorders.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2024-43778

Affected Products

Digital Video Recorders

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-43778 · Security Note
• https://takex-eng.co.jp/ja/news/news.php?s=68 · Note
• https://jvn.jp/en/vu/JVNVU90142679 · Note
• https://t.me/cvenotify/95040 · Telegram Post
• https://twitter.com/CVEnew/status/1836295222906548311 · Twitter Post
• https://t.me/cvedetector/5914 · Telegram Post