VulnerabilityModified

CVE-2021-41506

CRITICAL 9.8EPSS 2.26%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (2.26%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Xiaongmai AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, HI3518_50H10L_S39 V4.02.R11.7601.Nat.Onvif.20170420, V4.02.R11.Nat.Onvif.20160422, V4.02.R11.7601.Nat.Onvif.20170424, V4.02.R11.Nat.Onvif.20170327, V4.02.R11.Nat.Onvif.20161205, V4.02.R11.Nat.20170301, V4.02.R12.Nat.OnvifS.20170727 is affected by a backdoor in the macGuarder and dvrHelper binaries of DVR/NVR/IP camera firmware due to static root account credentials in the system.

CVSS 3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 2.26% probability · 82th percentile
CISA KEV: Not listed
Weakness: CWE-287
Affected: xiongmaitech/ahb7008t-mh-v2 firmware · xiongmaitech/ahb7804r-els firmware · xiongmaitech/ahb7804r-mh-v2 firmware · xiongmaitech/ahb7808r-ms-v2 firmware · xiongmaitech/ahb7808r-ms firmware · xiongmaitech/ahb7808t-ms-v2 firmware · xiongmaitech/ahb7804r-lms firmware · xiongmaitech/hi3518e 50h10l s39 firmware
Source: cve@mitre.org

References

https://github.com/Snawoot/hisilicon-dvr-telnetThird Party Advisory
https://github.com/tothi/hs-dvr-telnetThird Party Advisory
https://habr.com/en/post/486856/Exploit, Third Party Advisory
https://www.xiongmaitech.com/en/index.php/news/info/12/68Vendor Advisory
https://github.com/Snawoot/hisilicon-dvr-telnetThird Party Advisory
https://github.com/tothi/hs-dvr-telnetThird Party Advisory
https://habr.com/en/post/486856/Exploit, Third Party Advisory
https://www.xiongmaitech.com/en/index.php/news/info/12/68Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.