Vulnerabilitycritical

Hackers Exploiting 5-year-old Unpatched Vulnerability in TBK DVR Devices

The Hacker Newsby @TheHackersNewsMay 3, 2023 · 07:30 UTC (May 3, 2023)1 min read1 · 1 read

Read at thehackernews.com

Analyze CVE-2018-9995 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2018-9995 CVE-2016-20016

Tags: cve-2018-9995 cve-2016-20016 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2016-20016	MVPower CCTV DVR models, including TV-7104HE 1.8.4 115215B9 and TV7108HE, contain a web shell that is accessible via a /shell URI	9.8	86%	PoC ×2	Oct 19, 2022
CVE-2018-9995	TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run…	9.8	82%	PoC ×4	Apr 10, 2018

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  May 03, 2023 Surveillance / Vulnerability Threat actors are actively exploiting an unpatched five-year-old flaw impacting TBK digital video recording (DVR) devices, according to an advisory issued by Fortinet FortiGuard Labs. The vulnerability in question is CVE-2018-9995 (CVSS score: 9.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.