Description
Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated attacker, possibly using the default admin:tlJwpbo6 credentials, can connect to port 34567 and execute arbitrary operating system commands via a crafted JSON file during an upgrade request. Since at least 2021, Xiongmai has applied patches to prevent attackers from using this mechanism to execute telnetd.
Published: 2022-12-01
Score: 8.8 High
EPSS: 1.1% Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2022-47970 Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated attacker, possibly using the default admin:tlJwpbo6 credentials, can connect to port 34567 and execute arbitrary operating system commands via a crafted JSON file during an upgrade request. Since at least 2021, Xiongmai has applied patches to prevent attackers from using this mechanism to execute telnetd.
History

Thu, 24 Apr 2025 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Subscriptions

Xiongmaitech Mbd6304t Mbd6304t Firmware Nbd6808t-pl Nbd6808t-pl Firmware Nbd7004t-p Nbd7004t-p Firmware Nbd7008t-p Nbd7008t-p Firmware Nbd7016t-f-v2 Nbd7016t-f-v2 Firmware Nbd7024h-p Nbd7024h-p Firmware Nbd7024t-p Nbd7024t-p Firmware Nbd7804r-f\(ep\) Nbd7804r-f\(ep\) Firmware Nbd7804r-f\(hdmi\) Nbd7804r-f\(hdmi\) Firmware Nbd7804r-fw Nbd7804r-fw Firmware Nbd7804t-pl Nbd7804t-pl Firmware Nbd7808r-pl\(ep\) Nbd7808r-pl\(ep\) Firmware Nbd7808r-pl\(hdmi\) Nbd7808r-pl\(hdmi\) Firmware Nbd7808t-pl Nbd7808t-pl Firmware Nbd7904r-fs Nbd7904r-fs Firmware Nbd7904t-p Nbd7904t-p Firmware Nbd7904t-pl Nbd7904t-pl-xpoe Nbd7904t-pl-xpoe Firmware Nbd7904t-pl Firmware Nbd7904t-plc-xpoe Nbd7904t-plc-xpoe Firmware Nbd7904t-q Nbd7904t-q Firmware Nbd7908t-q Nbd7908t-q Firmware Nbd8004r-pl\(ep\) Nbd8004r-pl\(ep\) Firmware Nbd8004r-yl\(ep\) Nbd8004r-yl\(ep\) Firmware Nbd8004t-q Nbd8004t-q Firmware Nbd8008r-pl Nbd8008r-pl\(ep\) Nbd8008r-pl\(ep\) Firmware Nbd8008r-pl Firmware Nbd8008r-yl\(ep\) Nbd8008r-yl\(ep\) Firmware Nbd8008ra-gl Nbd8008ra-gl Firmware Nbd8008ra-glk Nbd8008ra-glk Firmware Nbd8008ra-ul\(ep\) Nbd8008ra-ul\(ep\) Firmware Nbd8008ra-ula Nbd8008ra-ula Firmware Nbd8008ra-ulk Nbd8008ra-ulk Firmware Nbd8008t-q Nbd8008t-q Firmware Nbd8009s-ula-v2 Nbd8009s-ula-v2 Firmware Nbd8010s-kl-v2 Nbd8010s-kl-v2 Firmware Nbd8016r-ul Nbd8016r-ul Firmware Nbd8016ra-k\(ep\) Nbd8016ra-k\(ep\) Firmware Nbd8016ra-ul Nbd8016ra-ul\(ep\) Nbd8016ra-ul\(ep\) Firmware Nbd8016ra-ul Firmware Nbd8016ra-ula Nbd8016ra-ula Firmware Nbd8016ra-ulk Nbd8016ra-ulk Firmware Nbd8016s-kl-v2 Nbd8016s-kl-v2 Firmware Nbd8016s-ula-v2 Nbd8016s-ula-v2 Firmware Nbd8016t-q-v2 Nbd8016t-q-v2 Firmware Nbd8025r-ul Nbd8025r-ul Firmware Nbd8032h4-p Nbd8032h4-p Firmware Nbd8032h4-q Nbd8032h4-q Firmware Nbd8032h4-qe Nbd8032h4-qe Firmware Nbd8032h4-ul Nbd8032h4-ul Firmware Nbd8032h8-p Nbd8032h8-p Firmware Nbd8032h8-qe Nbd8032h8-qe Firmware Nbd8032ra-ul-v2 Nbd8032ra-ul-v2 Firmware Nbd8064h8-p Nbd8064h8-p Firmware Nbd80n16ra-kl Nbd80n16ra-kl\(ep\) Nbd80n16ra-kl\(ep\) Firmware Nbd80n16ra-kl Firmware Nbd80s08s-kl\(ep\) Nbd80s08s-kl\(ep\) Firmware Nbd80s10s-kl Nbd80s10s-kl Firmware Nbd80s16s-kl Nbd80s16s-kl\(ep\) Nbd80s16s-kl\(ep\) Firmware Nbd80s16s-kl Firmware Nbd80x09ra-kl Nbd80x09ra-kl Firmware Nbd80x09s-kl Nbd80x09s-kl Firmware Nbd88x09s-kl Nbd88x09s-kl Firmware Nbd8904r-pl Nbd8904r-pl Firmware Nbd8904r-yl Nbd8904r-yl Firmware Nbd8904t-gsc-xpoe Nbd8904t-gsc-xpoe Firmware Nbd8904t-q Nbd8904t-q Firmware Nbd8908r-pl Nbd8908r-pl Firmware Nbd8908r-yl Nbd8908r-yl Firmware Nbd8908t-pl-xpoe Nbd8908t-pl-xpoe Firmware Nbd8908t-plc-xpoe Nbd8908t-plc-xpoe Firmware Nbd8916f4-q Nbd8916f4-q Firmware Nbd8916f8-q Nbd8916f8-q Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2025-04-24T20:09:06.565Z

Reserved: 2022-11-08T00:00:00.000Z

Link: CVE-2022-45045

cve-icon Vulnrichment

Updated: 2024-08-03T14:01:31.484Z

cve-icon NVD

Status : Modified

Published: 2022-12-01T05:15:12.043

Modified: 2025-04-24T20:15:29.603

Link: CVE-2022-45045

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses