CVE-2020-3924

TONNET DVR – Firmware Injection

Medium · published February 27, 2020

CVSS v3.1
6.4
EPSS
1%
Percentile
69.4
In the wild
Unconfirmed
What it is

DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET do not properly verify patch files. Attackers can inject a specific command into a patch file and gain access to the system.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01258 · 69.4th percentile
Published
2020-02-27T04:00Z
EPSS history
Timeline
  • 27 FEB 04:00Z
    TONNET DVR – Firmware Injection
    cvelistv5