CRITICAL🇵🇱 Wersja polska

CVE-2021-41506

CVSS 9.8v3.1pub. 2022-06-30upd. 2024-11-21

Xiaongmai AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, HI3518_50H10L_S39 V4.02.R11.7601.Nat.Onvif.20170420, V4.02.R11.Nat.Onvif.20160422, V4.02.R11.7601.Nat.Onvif.20170424, V4.02.R11.Nat.Onvif.20170327, V4.02.R11.Nat.Onvif.20161205, V4.02.R11.Nat.20170301, V4.02.R12.Nat.OnvifS.20170727 is affected by a backdoor in the macGuarder and dvrHelper binaries of DVR/NVR/IP camera firmware due to static root account credentials in the system.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Xiongmaitech Ahb7008t Mh V2

    HW
    Xiongmaitech
    wszystkie wersje

  • Xiongmaitech Ahb7008t Mh V2 Firmware

    OS
    Xiongmaitech
    4.02.r11.7601.nat.onvif.20170420

  • Xiongmaitech Ahb7804r Els

    HW
    Xiongmaitech
    wszystkie wersje

  • Xiongmaitech Ahb7804r Els Firmware

    OS
    Xiongmaitech
    4.02.r11.nat.onvif.20160422

  • Xiongmaitech Ahb7804r Lms

    HW
    Xiongmaitech
    wszystkie wersje

  • Xiongmaitech Ahb7804r Lms Firmware

    OS
    Xiongmaitech
    4.02.r11.nat.20170301

  • Xiongmaitech Ahb7804r Mh V2

    HW
    Xiongmaitech
    wszystkie wersje

  • Xiongmaitech Ahb7804r Mh V2 Firmware

    OS
    Xiongmaitech
    4.02.r11.7601.nat.onvif.20170424

  • Xiongmaitech Ahb7808r Ms

    HW
    Xiongmaitech
    wszystkie wersje

  • Xiongmaitech Ahb7808r Ms Firmware

    OS
    Xiongmaitech
    4.02.r11.nat.onvif.20160328

  • Xiongmaitech Ahb7808r Ms V2

    HW
    Xiongmaitech
    wszystkie wersje

  • Xiongmaitech Ahb7808r Ms V2 Firmware

    OS
    Xiongmaitech
    4.02.r11.nat.onvif.20170327

  • Xiongmaitech Ahb7808t Ms V2

    HW
    Xiongmaitech
    wszystkie wersje

  • Xiongmaitech Ahb7808t Ms V2 Firmware

    OS
    Xiongmaitech
    4.02.r11.nat.onvifc.20161205

  • Xiongmaitech Hi3518e 50h10l S39

    HW
    Xiongmaitech
    wszystkie wersje

  • Xiongmaitech Hi3518e 50h10l S39 Firmware

    OS
    Xiongmaitech
    4.02.r12.nat.onvifs.20170727
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2020-22253CRITICAL9.8ten sam produkt

Xiongmai Technology Co devices AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7...

CVE-2017-16725CRITICAL9.8ten sam produkt

A Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs using the NetSur...

CVE-2025-65856CRITICAL9.8PL ✓ten sam vendor

Authentication bypass w kamerach IP Xiongmai XM530 — dostęp bez uwierzytelnienia

CVE-2022-45460CRITICAL9.8ten sam vendor

Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02....

CVE-2018-17915CRITICAL9.8ten sam vendor

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communi...