TBK Vision TBK-DVR4216 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:tbkvision:tbk-dvr4216_firmware:-:*:*:*:*:*:*:*
part: o version: - update: *
| Vendor | Tbkvision (bed4a7b8-4482-5245-a2c8-59a12fbe119f) |
|---|---|
| Product | Tbk Dvr4216 Firmware (2f017c57-b494-52a1-9386-81d88786b487) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-9995 |
vulnerable | 2026-06-08 05:12:08.416282 |
Details available
TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a "Cookie: uid=admin" header, as demonstrated by a device.rsp?opt=user&cmd=list request that provides credentials within JSON data in a response.
Published: 2018-04-10T22:00:00.000Z
Updated: 2024-08-05T07:32:01.171Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10676 |
vulnerable | 2026-06-08 05:10:36.930954 |
Details available
CeNova, Night OWL, Novo, Pulnix, QSee, Securus, and TBK Vision DVR devices allow remote attackers to download a file and obtain sensitive credential information via a direct request for the download.rsp URI.
Published: 2018-05-02T18:00:00.000Z
Updated: 2024-09-17T02:06:41.186Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.