ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2020-3924

—
CVSS 3.1
9.8 critical
EPSS
1%p68
Published
()
Modified
Description

DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET do not properly verify patch files. Attackers can inject a specific command into a patch file and gain access to the system.

Vendors
tonnet
Products
tat-77104g1 firmware, tat-70432n firmware, tat-71416g1 firmware, tat-71832g1 firmware, tat-76104g3 firmware, tat-76108g3 firmware, tat-76116g3 firmware, tat-76132g3 firmware
Weakness
CWE-77
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news

No ingested article mentions this CVE yet.