Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-7227

Command Injection vulnerability in SystemK NVR 504/508/516

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

SystemK NVR 504/508/516 versions 2.3.5SK.30084998 and prior are vulnerable to a command injection vulnerability in the dynamic domain name system (DDNS) settings that could allow an attacker to execute arbitrary commands with root privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SystemK NVR 504

Default version status: unaffected

  • 2.3.5SK.30084998affected

SystemK NVR 508

Default version status: unaffected

  • 2.3.5SK.30084998affected

SystemK NVR 516

Default version status: unaffected

  • 2.3.5SK.30084998affected

References