Vulnerability-Lookup

CVE-2024-47001 (GCVE-0-2024-47001)

Vulnerability from cvelistv5 – Published: 2024-09-18 06:08 – Updated: 2024-09-18 15:23

Summary

Hidden functionality issue in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-18 14:58 UTC

CWE

Hidden functionality
CWE-912 - Hidden Functionality

Assigner

jpcert CNA under the jpcert root

CNA scorecard C 64/100 over 190 records in the last 180 days details

References

2 references

URL	Tags
https://www.takex-eng.co.jp/ja/news/news.php?s=68
https://jvn.jp/en/vu/JVNVU90142679/

Impacted products

18 products

Vendor	Product	Version	CPE status
TAKENAKA ENGINEERING CO., LTD.	HDVR-400	Affected: prior to 46110.1.100869.65	guessed
TAKENAKA ENGINEERING CO., LTD.	HDVR-800	Affected: prior to 53210.1.900103.65	guessed
TAKENAKA ENGINEERING CO., LTD.	HDVR-1600	Affected: prior to 53310.1.900111.65	guessed
TAKENAKA ENGINEERING CO., LTD.	AHD04T-A	Affected: prior to 7xx10.1.900055.65	guessed
TAKENAKA ENGINEERING CO., LTD.	AHD08T-A	Affected: prior to 7xx10.1.900055.65	guessed
TAKENAKA ENGINEERING CO., LTD.	AHD16T-A	Affected: prior to 7xx10.1.900055.65	guessed
TAKENAKA ENGINEERING CO., LTD.	NVR04T-A	Affected: prior to 56x10.1.100540.65	guessed
TAKENAKA ENGINEERING CO., LTD.	NVR08T-A	Affected: prior to 56x10.1.100540.65	guessed
TAKENAKA ENGINEERING CO., LTD.	NVR16T-A	Affected: prior to 49310.1.100540.65	guessed
takenaka_engineering	hdvr-400_firmware	Affected: 0 , < 46110.1.100869.65 (custom) cpe:2.3:o:takenaka_engineering:hdvr-400_firmware::::::::
takenaka_engineering	hdvr-800_firmware	Affected: 0 , < 53210.1.900103.65 (custom) cpe:2.3:o:takenaka_engineering:hdvr-800_firmware::::::::
takenaka_engineering	hdvr-1600_firmware	Affected: 0 , < 53310.1.900111.65 (custom) cpe:2.3:o:takenaka_engineering:hdvr-1600_firmware::::::::
takenaka_engineering	ahd04t-a_firmware	Affected: 0 , < 7xx10.1.900055.65 (custom) cpe:2.3:o:takenaka_engineering:ahd04t-a_firmware::::::::
takenaka_engineering	ahd08t-a_firmware	Affected: 0 , < 7xx10.1.900055.65 (custom) cpe:2.3:o:takenaka_engineering:ahd08t-a_firmware::::::::
takenaka_engineering	ahd16t-a_firmware	Affected: 0 , < 7xx10.1.900055.65 (custom) cpe:2.3:o:takenaka_engineering:ahd16t-a_firmware::::::::
takenaka_engineering	nvr04t-a_firmware	Affected: 0 , < 56x10.1.100540.65 (custom) cpe:2.3:o:takenaka_engineering:nvr04t-a_firmware::::::::
takenaka_engineering	nvr08t-a_firmware	Affected: 0 , < 56x10.1.100540.65 (custom) cpe:2.3:o:takenaka_engineering:nvr08t-a_firmware::::::::
takenaka_engineering	nvr16t-a_firmware	Affected: 0 , < 49310.1.100540.65 (custom) cpe:2.3:o:takenaka_engineering:nvr16t-a_firmware::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:takenaka_engineering:hdvr-400_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "hdvr-400_firmware",
            "vendor": "takenaka_engineering",
            "versions": [
              {
                "lessThan": "46110.1.100869.65",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:takenaka_engineering:hdvr-800_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "hdvr-800_firmware",
            "vendor": "takenaka_engineering",
            "versions": [
              {
                "lessThan": "53210.1.900103.65",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:takenaka_engineering:hdvr-1600_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "hdvr-1600_firmware",
            "vendor": "takenaka_engineering",
            "versions": [
              {
                "lessThan": "53310.1.900111.65",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:takenaka_engineering:ahd04t-a_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahd04t-a_firmware",
            "vendor": "takenaka_engineering",
            "versions": [
              {
                "lessThan": "7xx10.1.900055.65",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:takenaka_engineering:ahd08t-a_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahd08t-a_firmware",
            "vendor": "takenaka_engineering",
            "versions": [
              {
                "lessThan": "7xx10.1.900055.65",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:takenaka_engineering:ahd16t-a_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ahd16t-a_firmware",
            "vendor": "takenaka_engineering",
            "versions": [
              {
                "lessThan": "7xx10.1.900055.65",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:takenaka_engineering:nvr04t-a_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "nvr04t-a_firmware",
            "vendor": "takenaka_engineering",
            "versions": [
              {
                "lessThan": "56x10.1.100540.65",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:takenaka_engineering:nvr08t-a_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "nvr08t-a_firmware",
            "vendor": "takenaka_engineering",
            "versions": [
              {
                "lessThan": "56x10.1.100540.65",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:takenaka_engineering:nvr16t-a_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "nvr16t-a_firmware",
            "vendor": "takenaka_engineering",
            "versions": [
              {
                "lessThan": "49310.1.100540.65",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-47001",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-18T14:58:04.072398Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-912",
                "description": "CWE-912 Hidden Functionality",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-18T15:23:18.923Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "HDVR-400",
          "vendor": "TAKENAKA ENGINEERING CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 46110.1.100869.65"
            }
          ]
        },
        {
          "product": "HDVR-800",
          "vendor": "TAKENAKA ENGINEERING CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 53210.1.900103.65"
            }
          ]
        },
        {
          "product": "HDVR-1600",
          "vendor": "TAKENAKA ENGINEERING CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 53310.1.900111.65"
            }
          ]
        },
        {
          "product": "AHD04T-A",
          "vendor": "TAKENAKA ENGINEERING CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 7xx10.1.900055.65"
            }
          ]
        },
        {
          "product": "AHD08T-A",
          "vendor": "TAKENAKA ENGINEERING CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 7xx10.1.900055.65"
            }
          ]
        },
        {
          "product": "AHD16T-A",
          "vendor": "TAKENAKA ENGINEERING CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 7xx10.1.900055.65"
            }
          ]
        },
        {
          "product": "NVR04T-A",
          "vendor": "TAKENAKA ENGINEERING CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 56x10.1.100540.65"
            }
          ]
        },
        {
          "product": "NVR08T-A",
          "vendor": "TAKENAKA ENGINEERING CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 56x10.1.100540.65"
            }
          ]
        },
        {
          "product": "NVR16T-A",
          "vendor": "TAKENAKA ENGINEERING CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 49310.1.100540.65"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Hidden functionality issue in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Hidden functionality",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-18T06:08:14.167Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "url": "https://www.takex-eng.co.jp/ja/news/news.php?s=68"
        },
        {
          "url": "https://jvn.jp/en/vu/JVNVU90142679/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2024-47001",
    "datePublished": "2024-09-18T06:08:14.167Z",
    "dateReserved": "2024-09-17T04:34:03.008Z",
    "dateUpdated": "2024-09-18T15:23:18.923Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-47001",
      "date": "2026-10-15",
      "epss": "0.00659",
      "percentile": "0.50446"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "HDVR-400",
                "vendor": "TAKENAKA ENGINEERING CO., LTD.",
                "versions": [
                  {
                    "status": "affected",
                    "version": "prior to 46110.1.100869.65"
                  }
                ]
              },
              {
                "product": "HDVR-800",
                "vendor": "TAKENAKA ENGINEERING CO., LTD.",
                "versions": [
                  {
                    "status": "affected",
                    "version": "prior to 53210.1.900103.65"
                  }
                ]
              },
              {
                "product": "HDVR-1600",
                "vendor": "TAKENAKA ENGINEERING CO., LTD.",
                "versions": [
                  {
                    "status": "affected",
                    "version": "prior to 53310.1.900111.65"
                  }
                ]
              },
              {
                "product": "AHD04T-A",
                "vendor": "TAKENAKA ENGINEERING CO., LTD.",
                "versions": [
                  {
                    "status": "affected",
                    "version": "prior to 7xx10.1.900055.65"
                  }
                ]
              },
              {
                "product": "AHD08T-A",
                "vendor": "TAKENAKA ENGINEERING CO., LTD.",
                "versions": [
                  {
                    "status": "affected",
                    "version": "prior to 7xx10.1.900055.65"
                  }
                ]
              },
              {
                "product": "AHD16T-A",
                "vendor": "TAKENAKA ENGINEERING CO., LTD.",
                "versions": [
                  {
                    "status": "affected",
                    "version": "prior to 7xx10.1.900055.65"
                  }
                ]
              },
              {
                "product": "NVR04T-A",
                "vendor": "TAKENAKA ENGINEERING CO., LTD.",
                "versions": [
                  {
                    "status": "affected",
                    "version": "prior to 56x10.1.100540.65"
                  }
                ]
              },
              {
                "product": "NVR08T-A",
                "vendor": "TAKENAKA ENGINEERING CO., LTD.",
                "versions": [
                  {
                    "status": "affected",
                    "version": "prior to 56x10.1.100540.65"
                  }
                ]
              },
              {
                "product": "NVR16T-A",
                "vendor": "TAKENAKA ENGINEERING CO., LTD.",
                "versions": [
                  {
                    "status": "affected",
                    "version": "prior to 49310.1.100540.65"
                  }
                ]
              }
            ],
            "source": "vultures@jpcert.or.jp"
          },
          {
            "affectedData": [
              {
                "cpes": [
                  "cpe:2.3:o:takenaka_engineering:hdvr-400_firmware:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "hdvr-400_firmware",
                "vendor": "takenaka_engineering",
                "versions": [
                  {
                    "lessThan": "46110.1.100869.65",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:takenaka_engineering:hdvr-800_firmware:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "hdvr-800_firmware",
                "vendor": "takenaka_engineering",
                "versions": [
                  {
                    "lessThan": "53210.1.900103.65",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:takenaka_engineering:hdvr-1600_firmware:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "hdvr-1600_firmware",
                "vendor": "takenaka_engineering",
                "versions": [
                  {
                    "lessThan": "53310.1.900111.65",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:takenaka_engineering:ahd04t-a_firmware:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "ahd04t-a_firmware",
                "vendor": "takenaka_engineering",
                "versions": [
                  {
                    "lessThan": "7xx10.1.900055.65",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:takenaka_engineering:ahd08t-a_firmware:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "ahd08t-a_firmware",
                "vendor": "takenaka_engineering",
                "versions": [
                  {
                    "lessThan": "7xx10.1.900055.65",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:takenaka_engineering:ahd16t-a_firmware:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "ahd16t-a_firmware",
                "vendor": "takenaka_engineering",
                "versions": [
                  {
                    "lessThan": "7xx10.1.900055.65",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:takenaka_engineering:nvr04t-a_firmware:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "nvr04t-a_firmware",
                "vendor": "takenaka_engineering",
                "versions": [
                  {
                    "lessThan": "56x10.1.100540.65",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:takenaka_engineering:nvr08t-a_firmware:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "nvr08t-a_firmware",
                "vendor": "takenaka_engineering",
                "versions": [
                  {
                    "lessThan": "56x10.1.100540.65",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:takenaka_engineering:nvr16t-a_firmware:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "nvr16t-a_firmware",
                "vendor": "takenaka_engineering",
                "versions": [
                  {
                    "lessThan": "49310.1.100540.65",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Hidden functionality issue in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings."
          },
          {
            "lang": "es",
            "value": "Un problema de funcionalidad oculta en varias grabadoras de video digitales proporcionadas por TAKENAKA ENGINEERING CO., LTD. permite que un atacante remoto autenticado ejecute un comando de sistema operativo arbitrario en el dispositivo o altere la configuraci\u00f3n del dispositivo."
          }
        ],
        "id": "CVE-2024-47001",
        "lastModified": "2026-06-17T07:56:20.723",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 2.8,
              "impactScore": 5.9,
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2024-47001",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-18T14:58:04.072398Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2024-09-18T07:15:04.220",
        "references": [
          {
            "source": "vultures@jpcert.or.jp",
            "url": "https://jvn.jp/en/vu/JVNVU90142679/"
          },
          {
            "source": "vultures@jpcert.or.jp",
            "url": "https://www.takex-eng.co.jp/ja/news/news.php?s=68"
          }
        ],
        "sourceIdentifier": "vultures@jpcert.or.jp",
        "vulnStatus": "Deferred",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-912"
              }
            ],
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2025-05-28T21:25:15+00:00",
      "cve": "CVE-2024-47001",
      "id": "CVE-2024-47001",
      "initial_release_date": "2024-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2024-47001",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-47001.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "affected": [
              {
                "cpes": [
                  "cpe:2.3:o:takenaka_engineering:hdvr-400_firmware:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "hdvr-400_firmware",
                "vendor": "takenaka_engineering",
                "versions": [
                  {
                    "lessThan": "46110.1.100869.65",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:takenaka_engineering:hdvr-800_firmware:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "hdvr-800_firmware",
                "vendor": "takenaka_engineering",
                "versions": [
                  {
                    "lessThan": "53210.1.900103.65",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:takenaka_engineering:hdvr-1600_firmware:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "hdvr-1600_firmware",
                "vendor": "takenaka_engineering",
                "versions": [
                  {
                    "lessThan": "53310.1.900111.65",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:takenaka_engineering:ahd04t-a_firmware:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "ahd04t-a_firmware",
                "vendor": "takenaka_engineering",
                "versions": [
                  {
                    "lessThan": "7xx10.1.900055.65",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:takenaka_engineering:ahd08t-a_firmware:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "ahd08t-a_firmware",
                "vendor": "takenaka_engineering",
                "versions": [
                  {
                    "lessThan": "7xx10.1.900055.65",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:takenaka_engineering:ahd16t-a_firmware:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "ahd16t-a_firmware",
                "vendor": "takenaka_engineering",
                "versions": [
                  {
                    "lessThan": "7xx10.1.900055.65",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:takenaka_engineering:nvr04t-a_firmware:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "nvr04t-a_firmware",
                "vendor": "takenaka_engineering",
                "versions": [
                  {
                    "lessThan": "56x10.1.100540.65",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:takenaka_engineering:nvr08t-a_firmware:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "nvr08t-a_firmware",
                "vendor": "takenaka_engineering",
                "versions": [
                  {
                    "lessThan": "56x10.1.100540.65",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:takenaka_engineering:nvr16t-a_firmware:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "nvr16t-a_firmware",
                "vendor": "takenaka_engineering",
                "versions": [
                  {
                    "lessThan": "49310.1.100540.65",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "HIGH",
                  "baseScore": 8.8,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "LOW",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-47001",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-09-18T14:58:04.072398Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-912",
                    "description": "CWE-912 Hidden Functionality",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-09-18T14:58:30.790Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "HDVR-400",
              "vendor": "TAKENAKA ENGINEERING CO., LTD.",
              "versions": [
                {
                  "status": "affected",
                  "version": "prior to 46110.1.100869.65"
                }
              ]
            },
            {
              "product": "HDVR-800",
              "vendor": "TAKENAKA ENGINEERING CO., LTD.",
              "versions": [
                {
                  "status": "affected",
                  "version": "prior to 53210.1.900103.65"
                }
              ]
            },
            {
              "product": "HDVR-1600",
              "vendor": "TAKENAKA ENGINEERING CO., LTD.",
              "versions": [
                {
                  "status": "affected",
                  "version": "prior to 53310.1.900111.65"
                }
              ]
            },
            {
              "product": "AHD04T-A",
              "vendor": "TAKENAKA ENGINEERING CO., LTD.",
              "versions": [
                {
                  "status": "affected",
                  "version": "prior to 7xx10.1.900055.65"
                }
              ]
            },
            {
              "product": "AHD08T-A",
              "vendor": "TAKENAKA ENGINEERING CO., LTD.",
              "versions": [
                {
                  "status": "affected",
                  "version": "prior to 7xx10.1.900055.65"
                }
              ]
            },
            {
              "product": "AHD16T-A",
              "vendor": "TAKENAKA ENGINEERING CO., LTD.",
              "versions": [
                {
                  "status": "affected",
                  "version": "prior to 7xx10.1.900055.65"
                }
              ]
            },
            {
              "product": "NVR04T-A",
              "vendor": "TAKENAKA ENGINEERING CO., LTD.",
              "versions": [
                {
                  "status": "affected",
                  "version": "prior to 56x10.1.100540.65"
                }
              ]
            },
            {
              "product": "NVR08T-A",
              "vendor": "TAKENAKA ENGINEERING CO., LTD.",
              "versions": [
                {
                  "status": "affected",
                  "version": "prior to 56x10.1.100540.65"
                }
              ]
            },
            {
              "product": "NVR16T-A",
              "vendor": "TAKENAKA ENGINEERING CO., LTD.",
              "versions": [
                {
                  "status": "affected",
                  "version": "prior to 49310.1.100540.65"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Hidden functionality issue in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "Hidden functionality",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2024-09-18T06:08:14.167Z",
            "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
            "shortName": "jpcert"
          },
          "references": [
            {
              "url": "https://www.takex-eng.co.jp/ja/news/news.php?s=68"
            },
            {
              "url": "https://jvn.jp/en/vu/JVNVU90142679/"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "assignerShortName": "jpcert",
        "cveId": "CVE-2024-47001",
        "datePublished": "2024-09-18T06:08:14.167Z",
        "dateReserved": "2024-09-17T04:34:03.008Z",
        "dateUpdated": "2024-09-18T15:23:18.923Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

FKIE_CVE-2024-47001

Vulnerability from fkie_nvd - Published: 2024-09-18 07:15 - Updated: 2026-06-17 07:56

Severity

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Summary

References

	URL	Tags
	vultures@jpcert.or.jp	https://jvn.jp/en/vu/JVNVU90142679/
	vultures@jpcert.or.jp	https://www.takex-eng.co.jp/ja/news/news.php?s=68

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "HDVR-400",
          "vendor": "TAKENAKA ENGINEERING CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 46110.1.100869.65"
            }
          ]
        },
        {
          "product": "HDVR-800",
          "vendor": "TAKENAKA ENGINEERING CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 53210.1.900103.65"
            }
          ]
        },
        {
          "product": "HDVR-1600",
          "vendor": "TAKENAKA ENGINEERING CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 53310.1.900111.65"
            }
          ]
        },
        {
          "product": "AHD04T-A",
          "vendor": "TAKENAKA ENGINEERING CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 7xx10.1.900055.65"
            }
          ]
        },
        {
          "product": "AHD08T-A",
          "vendor": "TAKENAKA ENGINEERING CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 7xx10.1.900055.65"
            }
          ]
        },
        {
          "product": "AHD16T-A",
          "vendor": "TAKENAKA ENGINEERING CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 7xx10.1.900055.65"
            }
          ]
        },
        {
          "product": "NVR04T-A",
          "vendor": "TAKENAKA ENGINEERING CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 56x10.1.100540.65"
            }
          ]
        },
        {
          "product": "NVR08T-A",
          "vendor": "TAKENAKA ENGINEERING CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 56x10.1.100540.65"
            }
          ]
        },
        {
          "product": "NVR16T-A",
          "vendor": "TAKENAKA ENGINEERING CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 49310.1.100540.65"
            }
          ]
        }
      ],
      "source": "vultures@jpcert.or.jp"
    },
    {
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:o:takenaka_engineering:hdvr-400_firmware:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "hdvr-400_firmware",
          "vendor": "takenaka_engineering",
          "versions": [
            {
              "lessThan": "46110.1.100869.65",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:takenaka_engineering:hdvr-800_firmware:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "hdvr-800_firmware",
          "vendor": "takenaka_engineering",
          "versions": [
            {
              "lessThan": "53210.1.900103.65",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:takenaka_engineering:hdvr-1600_firmware:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "hdvr-1600_firmware",
          "vendor": "takenaka_engineering",
          "versions": [
            {
              "lessThan": "53310.1.900111.65",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:takenaka_engineering:ahd04t-a_firmware:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "ahd04t-a_firmware",
          "vendor": "takenaka_engineering",
          "versions": [
            {
              "lessThan": "7xx10.1.900055.65",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:takenaka_engineering:ahd08t-a_firmware:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "ahd08t-a_firmware",
          "vendor": "takenaka_engineering",
          "versions": [
            {
              "lessThan": "7xx10.1.900055.65",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:takenaka_engineering:ahd16t-a_firmware:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "ahd16t-a_firmware",
          "vendor": "takenaka_engineering",
          "versions": [
            {
              "lessThan": "7xx10.1.900055.65",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:takenaka_engineering:nvr04t-a_firmware:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "nvr04t-a_firmware",
          "vendor": "takenaka_engineering",
          "versions": [
            {
              "lessThan": "56x10.1.100540.65",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:takenaka_engineering:nvr08t-a_firmware:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "nvr08t-a_firmware",
          "vendor": "takenaka_engineering",
          "versions": [
            {
              "lessThan": "56x10.1.100540.65",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:takenaka_engineering:nvr16t-a_firmware:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "nvr16t-a_firmware",
          "vendor": "takenaka_engineering",
          "versions": [
            {
              "lessThan": "49310.1.100540.65",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Hidden functionality issue in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings."
    },
    {
      "lang": "es",
      "value": "Un problema de funcionalidad oculta en varias grabadoras de video digitales proporcionadas por TAKENAKA ENGINEERING CO., LTD. permite que un atacante remoto autenticado ejecute un comando de sistema operativo arbitrario en el dispositivo o altere la configuraci\u00f3n del dispositivo."
    }
  ],
  "id": "CVE-2024-47001",
  "lastModified": "2026-06-17T07:56:20.723",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-47001",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2024-09-18T14:58:04.072398Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2024-09-18T07:15:04.220",
  "references": [
    {
      "source": "vultures@jpcert.or.jp",
      "url": "https://jvn.jp/en/vu/JVNVU90142679/"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "url": "https://www.takex-eng.co.jp/ja/news/news.php?s=68"
    }
  ],
  "sourceIdentifier": "vultures@jpcert.or.jp",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-912"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}

GHSA-5PM9-6VQ7-8MC4

Vulnerability from github – Published: 2024-09-18 09:30 – Updated: 2024-09-18 18:30

Details

Severity

8.8 (High)


                  
                    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-47001"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-912"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-09-18T07:15:04Z",
    "severity": "HIGH"
  },
  "details": "Hidden functionality issue in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings.",
  "id": "GHSA-5pm9-6vq7-8mc4",
  "modified": "2024-09-18T18:30:51Z",
  "published": "2024-09-18T09:30:36Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47001"
    },
    {
      "type": "WEB",
      "url": "https://jvn.jp/en/vu/JVNVU90142679"
    },
    {
      "type": "WEB",
      "url": "https://www.takex-eng.co.jp/ja/news/news.php?s=68"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

JVNDB-2024-008391

Vulnerability from jvndb - Published: 2024-09-19 05:07 - Updated:2024-09-19 05:07

Severity

8.8 (High) - cvssV3_0 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Summary

Multiple vulnerabilities in TAKENAKA ENGINEERING digital video recorders

Details

Multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. contain multiple vulnerabilities listed below.

Improper authentication (CWE-287) - CVE-2024-41929
OS command injection (CWE-78) - CVE-2024-43778
Hidden functionality (CWE-912) - CVE-2024-47001

Yoshiki Mori, Ushimaru Hayato, Yuki Umemura and Masaki Kubo of Cybersecurity Research Institute, National Institute of Information and Communications Technology reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer.

References

Type

URL

	JVN	https://jvn.jp/en/vu/JVNVU90142679/index.html
	CVE	https://www.cve.org/CVERecord?id=CVE-2024-41929
	CVE	https://www.cve.org/CVERecord?id=CVE-2024-43778
	CVE	https://www.cve.org/CVERecord?id=CVE-2024-47001
	Improper Authentication(CWE-287)	https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html
	OS Command Injection(CWE-78)	https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html
	Hidden Functionality(CWE-912)	https://cwe.mitre.org/data/definitions/912.html

Impacted products

Vendor

Product

	TAKENAKA ENGINEERING CO., LTD.	AHD04T-A
	TAKENAKA ENGINEERING CO., LTD.	AHD08T-A
	TAKENAKA ENGINEERING CO., LTD.	AHD16T-A
	TAKENAKA ENGINEERING CO., LTD.	HDVR-1600
	TAKENAKA ENGINEERING CO., LTD.	HDVR-400
	TAKENAKA ENGINEERING CO., LTD.	HDVR-800
	TAKENAKA ENGINEERING CO., LTD.	NVR04T-A
	TAKENAKA ENGINEERING CO., LTD.	NVR08T-A
	TAKENAKA ENGINEERING CO., LTD.	NVR16T-A

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-008391.html",
  "dc:date": "2024-09-19T14:07+09:00",
  "dcterms:issued": "2024-09-19T14:07+09:00",
  "dcterms:modified": "2024-09-19T14:07+09:00",
  "description": "Multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. contain multiple vulnerabilities listed below.\r\n\r\n\u003cul\u003e\r\n\u003cli\u003eImproper authentication (CWE-287) - CVE-2024-41929\u003c/li\u003e\r\n\u003cli\u003eOS command injection (CWE-78) - CVE-2024-43778\u003c/li\u003e\r\n\u003cli\u003eHidden functionality (CWE-912) - CVE-2024-47001\u003c/li\u003e\r\n\u003c/ul\u003e\r\n\r\nYoshiki Mori, Ushimaru Hayato, Yuki Umemura and Masaki Kubo of Cybersecurity Research Institute, National Institute of Information and Communications Technology reported these vulnerabilities to JPCERT/CC.\r\nJPCERT/CC coordinated with the developer.",
  "link": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-008391.html",
  "sec:cpe": [
    {
      "#text": "cpe:/o:misc:takenaka_engineering_ahd04t-a",
      "@product": "AHD04T-A",
      "@vendor": "TAKENAKA ENGINEERING CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:misc:takenaka_engineering_ahd08t-a",
      "@product": "AHD08T-A",
      "@vendor": "TAKENAKA ENGINEERING CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:misc:takenaka_engineering_ahd16t-a",
      "@product": "AHD16T-A",
      "@vendor": "TAKENAKA ENGINEERING CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:misc:takenaka_engineering_hdvr-1600",
      "@product": "HDVR-1600",
      "@vendor": "TAKENAKA ENGINEERING CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:misc:takenaka_engineering_hdvr-400",
      "@product": "HDVR-400",
      "@vendor": "TAKENAKA ENGINEERING CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:misc:takenaka_engineering_hdvr-800",
      "@product": "HDVR-800",
      "@vendor": "TAKENAKA ENGINEERING CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:misc:takenaka_engineering_nvr04t-a",
      "@product": "NVR04T-A",
      "@vendor": "TAKENAKA ENGINEERING CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:misc:takenaka_engineering_nvr08t-a",
      "@product": "NVR08T-A",
      "@vendor": "TAKENAKA ENGINEERING CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:misc:takenaka_engineering_nvr16t-a",
      "@product": "NVR16T-A",
      "@vendor": "TAKENAKA ENGINEERING CO., LTD.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "8.8",
    "@severity": "High",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2024-008391",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/vu/JVNVU90142679/index.html",
      "@id": "JVNVU#90142679",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-41929",
      "@id": "CVE-2024-41929",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-43778",
      "@id": "CVE-2024-43778",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-47001",
      "@id": "CVE-2024-47001",
      "@source": "CVE"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-287",
      "@title": "Improper Authentication(CWE-287)"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-78",
      "@title": "OS Command Injection(CWE-78)"
    },
    {
      "#text": "https://cwe.mitre.org/data/definitions/912.html",
      "@id": "CWE-912",
      "@title": "Hidden Functionality(CWE-912)"
    }
  ],
  "title": "Multiple vulnerabilities in TAKENAKA ENGINEERING digital video recorders"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2024-47001 (GCVE-0-2024-47001)

FKIE_CVE-2024-47001

GHSA-5PM9-6VQ7-8MC4

JVNDB-2024-008391

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour