CVE-2018-9995 TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104....
CriticalCVSS 9.8
EPSS 82.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a "Cookie: uid=admin" header, as demonstrated by a device.rsp?opt=user&cmd=list request that provides credentials within JSON data in a response.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tbkvision tbk-dvr4216 firmware | All versions | No fix listed |
| tbkvision tbk-dvr4104 firmware | All versions | No fix listed |
References
- misteralfa-hack.blogspot.cl exploit third-party-advisory
- misteralfa-hack.blogspot.cl exploit third-party-advisory
- www.bleepingcomputer.com exploit third-party-advisory
- 44577 exploit third-party-advisory vdb-entry