high7.8
CVE-2021-44954
In QVIS NVR DVR before 2021-12-13, an attacker can escalate privileges from a qvisdvr user to the root user by abusing a Sudo misconfiguration.
Impact
In QVIS NVR DVR before 2021-12-13, an attacker can escalate privileges from a qvisdvr user to the root user by abusing a Sudo misconfiguration.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qvis | Dvr Firmware | before 2021-12-13 |
| Qvis | Nvr Firmware | before 2021-12-13 |
References
- NVD record
- CVE.org record
- https://gist.github.com/Meeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee/a670418d51051d4e6513d86e84e8d5b8
- https://twitter.com/Me9187/status/1414906288287404039
- https://gist.github.com/Meeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee/a670418d51051d4e6513d86e84e8d5b8
- https://twitter.com/Me9187/status/1414906288287404039