Back to Database
Status published
Unknown
CVE-2024-43778
OS command injection vulnerability in multiple digital video recorders provided...
Vulnerability Description
OS command injection vulnerability in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-43778
Credits & Attribution
No credits recorded in the NVD database.
Affected Vendor
TAKENAKA ENGINEERING CO., LTD.
View all reports →Affected Software
HDVR-400, HDVR-800, HDVR-1600, AHD04T-A, AHD08T-A, AHD16T-A, NVR04T-A, NVR08T-A, NVR16T-A
Vulnerable Versions:
prior to 46110.1.100869.65, prior to 53210.1.900103.65, prior to 53310.1.900111.65, prior to 7xx10.1.900055.65, prior to 56x10.1.100540.65, prior to 49310.1.100540.65
Timeline
Official Publish:
September 18th, 2024
Last Modified:
September 18th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.