critical9.8
CVE-2023-7227
SystemK NVR 504/508/516 versions 2.3.5SK.30084998 and prior are vulnerable to a command injection vulnerability in the dynamic domain name system (DDNS) settin…
Impact
SystemK NVR 504/508/516 versions 2.3.5SK.30084998 and prior are vulnerable to a command injection vulnerability in the dynamic domain name system (DDNS) settings that could allow an attacker to execute arbitrary commands with root privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Systemk-Corp | Nvr 504 Firmware | Version 2.3.5sk.30084998 |
| Systemk-Corp | Nvr 508 Firmware | Version 2.3.5sk.30084998 |
| Systemk-Corp | Nvr 516 Firmware | Version 2.3.5sk.30084998 |