Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2020-3924

TONNET DVR – Firmware Injection

Description

DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET do not properly verify patch files. Attackers can inject a specific command into a patch file and gain access to the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TONNET DVR

  • 0 to ≤ 20191216affected

TONNET DVR

  • 0 to ≤ 20200213affected

References