PT-2025-27049 · Unknown · Ahd Recorders+1

Chuya Hayakawa + 1 · Published 2025-06-27 · Updated 2025-07-02 · CVE-2025-36529

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: TB-eye network recorders (affected versions not specified) AHD recorders (affected versions not specified)

Description: A problem of injection of system operating system commands exists in the mentioned devices. If this issue is exploited, an attacker who logs in to the device could execute an arbitrary system command.

Recommendations: For TB-eye network recorders, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For AHD recorders, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-36529

Affected Products

Ahd Recorders

Tb-Eye Network Recorders

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-36529 · Security Note
• https://t.me/cvenotify/126837 · Telegram Post
• https://twitter.com/cracbot/status/1940364873600213247 · Twitter Post
• https://jvn.jp/en/vu/JVNVU93396297 · Note
• https://t.me/cvetracker/27211 · Telegram Post
• https://tbeye.com/topics/ahd · Note