Attacker Value
Unknown
CVE-2022-45045
CVE-2022-45045
(Last updated October 08, 2023) ▾
MITRE ATT&CK
Log in to add MITRE ATT&CK tag
Add MITRE ATT&CK tactics and techniques that apply to this CVE.
Description
Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated attacker, possibly using the default admin:tlJwpbo6 credentials, can connect to port 34567 and execute arbitrary operating system commands via a crafted JSON file during an upgrade request. Since at least 2021, Xiongmai has applied patches to prevent attackers from using this mechanism to execute telnetd.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
Data provided by the National Vulnerability Database (NVD)
Base Score:
8.8 High
Impact Score:
5.9
Exploitability Score:
2.8
Attack Vector (AV):
Network
Attack Complexity (AC):
Low
Privileges Required (PR):
Low
User Interaction (UI):
None
Scope (S):
Unchanged
Confidentiality (C):
High
Integrity (I):
High
Availability (A):
High
General Information
Vendors
- xiongmaitech
Products
- mbd6304t -,
- mbd6304t firmware 4.02.r11.00000117.10001.131900.00000,
- nbd6808t-pl -,
- nbd6808t-pl firmware 4.02.r11.c7431119.12001.130000.00000,
- nbd7004t-p,
- nbd7004t-p firmware -,
- nbd7008t-p,
- nbd7008t-p firmware -,
- nbd7016t-f-v2,
- nbd7016t-f-v2 firmware -,
- nbd7024h-p,
- nbd7024h-p firmware -,
- nbd7024t-p,
- nbd7024t-p firmware -,
- nbd7804r-f(ep),
- nbd7804r-f(ep) firmware -,
- nbd7804r-f(hdmi),
- nbd7804r-f(hdmi) firmware -,
- nbd7804r-fw,
- nbd7804r-fw firmware -,
- nbd7804t-pl,
- nbd7804t-pl firmware -,
- nbd7808r-pl(ep),
- nbd7808r-pl(ep) firmware -,
- nbd7808r-pl(hdmi),
- nbd7808r-pl(hdmi) firmware -,
- nbd7808t-pl,
- nbd7808t-pl firmware -,
- nbd7904r-fs,
- nbd7904r-fs firmware -,
- nbd7904t-p,
- nbd7904t-p firmware -,
- nbd7904t-pl,
- nbd7904t-pl firmware -,
- nbd7904t-pl-xpoe -,
- nbd7904t-pl-xpoe firmware -,
- nbd7904t-plc-xpoe -,
- nbd7904t-plc-xpoe firmware -,
- nbd7904t-q,
- nbd7904t-q firmware -,
- nbd7908t-q,
- nbd7908t-q firmware -,
- nbd8004r-pl(ep),
- nbd8004r-pl(ep) firmware -,
- nbd8004r-yl(ep) -,
- nbd8004r-yl(ep) firmware -,
- nbd8004t-q,
- nbd8004t-q firmware -,
- nbd8008r-pl,
- nbd8008r-pl firmware -,
- nbd8008r-pl(ep),
- nbd8008r-pl(ep) firmware -,
- nbd8008r-yl(ep) -,
- nbd8008r-yl(ep) firmware -,
- nbd8008ra-gl -,
- nbd8008ra-gl firmware -,
- nbd8008ra-glk -,
- nbd8008ra-glk firmware -,
- nbd8008ra-ul(ep) -,
- nbd8008ra-ul(ep) firmware -,
- nbd8008ra-ula -,
- nbd8008ra-ula firmware -,
- nbd8008ra-ulk -,
- nbd8008ra-ulk firmware -,
- nbd8008t-q,
- nbd8008t-q firmware -,
- nbd8009s-ula-v2 -,
- nbd8009s-ula-v2 firmware -,
- nbd8010s-kl-v2 -,
- nbd8010s-kl-v2 firmware -,
- nbd8016r-ul,
- nbd8016r-ul firmware -,
- nbd8016ra-k(ep) -,
- nbd8016ra-k(ep) firmware -,
- nbd8016ra-ul -,
- nbd8016ra-ul firmware -,
- nbd8016ra-ul(ep) -,
- nbd8016ra-ul(ep) firmware -,
- nbd8016ra-ula -,
- nbd8016ra-ula firmware -,
- nbd8016ra-ulk -,
- nbd8016ra-ulk firmware -,
- nbd8016s-kl-v2 -,
- nbd8016s-kl-v2 firmware -,
- nbd8016s-ula-v2 -,
- nbd8016s-ula-v2 firmware -,
- nbd8016t-q-v2,
- nbd8016t-q-v2 firmware -,
- nbd8025r-ul,
- nbd8025r-ul firmware -,
- nbd8032h4-p,
- nbd8032h4-p firmware -,
- nbd8032h4-q,
- nbd8032h4-q firmware -,
- nbd8032h4-qe,
- nbd8032h4-qe firmware -,
- nbd8032h4-ul -,
- nbd8032h4-ul firmware -,
- nbd8032h8-p,
- nbd8032h8-p firmware -,
- nbd8032h8-qe,
- nbd8032h8-qe firmware -,
- nbd8032ra-ul-v2 -,
- nbd8032ra-ul-v2 firmware -,
- nbd8064h8-p,
- nbd8064h8-p firmware -,
- nbd80n16ra-kl -,
- nbd80n16ra-kl firmware -,
- nbd80n16ra-kl(ep) -,
- nbd80n16ra-kl(ep) firmware -,
- nbd80s08s-kl(ep) -,
- nbd80s08s-kl(ep) firmware -,
- nbd80s10s-kl -,
- nbd80s10s-kl firmware -,
- nbd80s16s-kl -,
- nbd80s16s-kl firmware -,
- nbd80s16s-kl(ep) -,
- nbd80s16s-kl(ep) firmware -,
- nbd80x09ra-kl -,
- nbd80x09ra-kl firmware -,
- nbd80x09s-kl -,
- nbd80x09s-kl firmware -,
- nbd88x09s-kl -,
- nbd88x09s-kl firmware -,
- nbd8904r-pl,
- nbd8904r-pl firmware -,
- nbd8904r-yl -,
- nbd8904r-yl firmware -,
- nbd8904t-gsc-xpoe -,
- nbd8904t-gsc-xpoe firmware -,
- nbd8904t-q,
- nbd8904t-q firmware -,
- nbd8908r-pl,
- nbd8908r-pl firmware -,
- nbd8908r-yl,
- nbd8908r-yl firmware -,
- nbd8908t-pl-xpoe -,
- nbd8908t-pl-xpoe firmware -,
- nbd8908t-plc-xpoe -,
- nbd8908t-plc-xpoe firmware -,
- nbd8916f4-q,
- nbd8916f4-q firmware -,
- nbd8916f8-q,
- nbd8916f8-q firmware -
References
Miscellaneous
