Find a vulnerability

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-000154.html",
  "dc:date": "2026-10-20T15:55+09:00",
  "dcterms:issued": "2026-10-20T15:55+09:00",
  "dcterms:modified": "2026-10-20T15:55+09:00",
  "description": "Multiple DVRs provided by Atsumi Electric Co., Ltd. contain multiple vulnerabilities listed below:\u003ca href=\u0027https://cwe.mitre.org/data/definitions/912.html\u0027 target=\u0027_blank\u0027\u003e\u003c/a\u003e\u003ca href=\u0027https://cwe.mitre.org/data/definitions/912.html\u0027 target=\u0027_blank\u0027\u003e\u003c/a\u003e\u003cul\u003e\u003cli\u003eHidden Functionality (CWE-912) - CVE-2026-97627\u003c/li\u003e\u003cli\u003eHidden Functionality (CWE-912) - CVE-2026-100737\u003c/li\u003e\u003c/ul\u003eCyber Threat Analysis Office, Cybersecurity Research Institute, National Institute of Information and Communications Technology (NICT) reported these vulnerabilities to Atsumi Electric Co., Ltd. and coordinated. After the coordination was completed, NICTER Analysis Team reported the case to JPCERT/CC to notify users of the solution through JVN.",
  "link": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-000154.html",
  "sec:cpe": [
    {
      "#text": "cpe:/h:misc:atsumi_adx1004",
      "@product": "ADX1004",
      "@vendor": "ATSUMI Electric co.,Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:misc:atsumi_adx1008",
      "@product": "ADX1008",
      "@vendor": "ATSUMI Electric co.,Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:misc:atsumi_adx2016",
      "@product": "ADX2016",
      "@vendor": "ATSUMI Electric co.,Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:misc:atsumi_adx204",
      "@product": "ADX204",
      "@vendor": "ATSUMI Electric co.,Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:misc:atsumi_adx3004",
      "@product": "ADX3004",
      "@vendor": "ATSUMI Electric co.,Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:misc:atsumi_adx3008",
      "@product": "ADX3008",
      "@vendor": "ATSUMI Electric co.,Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:misc:atsumi_adx3016",
      "@product": "ADX3016",
      "@vendor": "ATSUMI Electric co.,Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:misc:atsumi_adx404",
      "@product": "ADX404",
      "@vendor": "ATSUMI Electric co.,Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:misc:atsumi_adx5004",
      "@product": "ADX5004",
      "@vendor": "ATSUMI Electric co.,Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:misc:atsumi_adx5008",
      "@product": "ADX5008",
      "@vendor": "ATSUMI Electric co.,Ltd.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "7.2",
    "@severity": "High",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2026-000154",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN88864366/index.html",
      "@id": "JVN#88864366",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-97627",
      "@id": "CVE-2026-97627",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-100737",
      "@id": "CVE-2026-100737",
      "@source": "CVE"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "Atsumi Electric DVRs contain hidden functionality issues"
}

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000024.html",
  "dc:date": "2024-02-29T14:59+09:00",
  "dcterms:issued": "2024-02-29T14:59+09:00",
  "dcterms:modified": "2024-02-29T14:59+09:00",
  "description": "OET-213H-BTS1 is a digital temperature measurement and face recognition terminal, developed by Zhejiang Uniview Technologies Co.,Ltd and provided by Atsumi Electric Co., Ltd.\r\nThe initial configuration of the product is \u0026#8203;insecure (CWE-1188), it does not perform an authorization check when processing the API requests.",
  "link": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000024.html",
  "sec:cpe": {
    "#text": "cpe:/a:misc:atsumi_electric_oet-213h-bts1",
    "@product": "OET-213H-BTS1",
    "@vendor": "ATSUMI Electric co.,Ltd.",
    "@version": "2.2"
  },
  "sec:cvss": [
    {
      "@score": "5.8",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:A/AC:L/Au:N/C:P/I:P/A:P",
      "@version": "2.0"
    },
    {
      "@score": "8.3",
      "@severity": "High",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2024-000024",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN77203800/index.html",
      "@id": "JVN#77203800",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-25972",
      "@id": "CVE-2024-25972",
      "@source": "CVE"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "OET-213H-BTS1 missing authorization check in the initial configuration"
}