Skip to content

Product

TONNET DVR vulnerabilities

2 published CVES affecting TONNET DVR, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
2
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest TONNET DVR CVEs

Newest publication first

  1. CVE-2020-3924 TONNET DVR – Firmware Injection

    Published
    CriticalCVSS 9.8 EPSS 1.3%

    DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET do not properly verify patch files. Attackers can inject a specific command into a patch file and gain access to the system.

  2. CVE-2020-3923 TONNET DVR – Broken Access Control

    Published
    CriticalCVSS 9.8 EPSS 1.7%

    DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET, contain misconfigured authentication mechanism. Attackers can crack the default password and gain access to the system.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.