Showing 1 vulnerability on this page for dvr_vx16_firmware

Signals CISA KEV Ransomware Nuclei
Visual-Tools vulnerability results
VulnerabilityTitle and contextCVSSEPSSPoCsSignalsSTIX action

visual-tools dvr_vx16_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

In Visual Tools DVR VX16 4.2.28.0, an unauthenticated attacker can achieve remote command execution via shell metacharacters in the cgi-bin/slogin/login.py User-Agent HTTP header.

CWE-78Oct 7, 20211 related artifact
CVSS9.8v3.1EPSS69.9%PoCs1SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei templateSTIX