{"id":"CVE-2026-100737","state":"PUBLISHED","title":"Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privi","description":"Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may upgrade the affected product to unauthorized firmware.","publishedAt":"2026-10-20T05:28:36.790Z","updatedAt":"2026-10-20T19:15:34.708Z","severity":{"score":6.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","source":"jpcert"},"assigner":"jpcert","products":["Atsumi Electric Co., Ltd. ADX5004","Atsumi Electric Co., Ltd. ADX5008","Atsumi Electric Co., Ltd. ADX404","Atsumi Electric Co., Ltd. ADX3004","Atsumi Electric Co., Ltd. ADX3008","Atsumi Electric Co., Ltd. ADX3016","Atsumi Electric Co., Ltd. ADX204","Atsumi Electric Co., Ltd. ADX1004","Atsumi Electric Co., Ltd. ADX1008","Atsumi Electric Co., Ltd. ADX2016"],"affected":[{"vendor":"Atsumi Electric Co., Ltd.","product":"ADX5004","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"Ver.10.8.237","versionType":"semver"}]},{"vendor":"Atsumi Electric Co., Ltd.","product":"ADX5008","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"Ver.10.8.237","versionType":"semver"}]},{"vendor":"Atsumi Electric Co., Ltd.","product":"ADX404","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"Ver.10.8.237","versionType":"semver"}]},{"vendor":"Atsumi Electric Co., Ltd.","product":"ADX3004","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"Ver.10.8.237","versionType":"semver"}]},{"vendor":"Atsumi Electric Co., Ltd.","product":"ADX3008","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"Ver.10.8.237","versionType":"semver"}]},{"vendor":"Atsumi Electric Co., Ltd.","product":"ADX3016","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"Ver.10.8.237","versionType":"semver"}]},{"vendor":"Atsumi Electric Co., Ltd.","product":"ADX204","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"Ver.10.8.237","versionType":"semver"}]},{"vendor":"Atsumi Electric Co., Ltd.","product":"ADX1004","versions":[{"version":"all versions","status":"affected"}]},{"vendor":"Atsumi Electric Co., Ltd.","product":"ADX1008","versions":[{"version":"all versions","status":"affected"}]},{"vendor":"Atsumi Electric Co., Ltd.","product":"ADX2016","versions":[{"version":"all versions","status":"affected"}]}],"references":["https://www.atsumi.co.jp/info-20261005.html","https://jvn.jp/en/jp/JVN88864366/"],"weaknesses":["CWE-912"],"ingestedAt":"2026-10-29T20:10:13.529Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/100xxx/CVE-2026-100737.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-100737","state":"PUBLISHED","datePublished":"2026-10-20T05:28:36.790Z","dateUpdated":"2026-10-20T19:15:34.708Z","assignerShortName":"jpcert","assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateReserved":"2026-09-29T23:55:30.243Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may upgrade the affected product to unauthorized firmware."}],"affected":[{"vendor":"Atsumi Electric Co., Ltd.","product":"ADX5004","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"Ver.10.8.237","versionType":"semver"}]},{"vendor":"Atsumi Electric Co., Ltd.","product":"ADX5008","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"Ver.10.8.237","versionType":"semver"}]},{"vendor":"Atsumi Electric Co., Ltd.","product":"ADX404","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"Ver.10.8.237","versionType":"semver"}]},{"vendor":"Atsumi Electric Co., Ltd.","product":"ADX3004","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"Ver.10.8.237","versionType":"semver"}]},{"vendor":"Atsumi Electric Co., Ltd.","product":"ADX3008","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"Ver.10.8.237","versionType":"semver"}]},{"vendor":"Atsumi Electric Co., Ltd.","product":"ADX3016","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"Ver.10.8.237","versionType":"semver"}]},{"vendor":"Atsumi Electric Co., Ltd.","product":"ADX204","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"Ver.10.8.237","versionType":"semver"}]},{"vendor":"Atsumi Electric Co., Ltd.","product":"ADX1004","versions":[{"version":"all versions","status":"affected"}]},{"vendor":"Atsumi Electric Co., Ltd.","product":"ADX1008","versions":[{"version":"all versions","status":"affected"}]},{"vendor":"Atsumi Electric Co., Ltd.","product":"ADX2016","versions":[{"version":"all versions","status":"affected"}]}],"references":[{"url":"https://www.atsumi.co.jp/info-20261005.html"},{"url":"https://jvn.jp/en/jp/JVN88864366/"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_0":{"version":"3.0","baseSeverity":"MEDIUM","baseScore":4.9,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N"}},{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV4_0":{"version":"4.0","baseSeverity":"MEDIUM","baseScore":6.9,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-912","description":"Hidden functionality","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"jpcert","orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateUpdated":"2026-10-20T05:28:36.790Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-10-20T19:15:26.313735Z","id":"CVE-2026-100737","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-10-20T19:15:34.708Z"}}]}}}