« Volver al listado

CVE-2024-41929

Estado: AplazadaAlta (8.8)—

Improper authentication vulnerability in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Takenaka Engineering — Digital Video RecorderAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-41929",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-41929",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-09-18T14:59:50.977866Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "vultures@jpcert.or.jp",
      "affectedData": [
        {
          "vendor": "TAKENAKA ENGINEERING CO., LTD.",
          "product": "HDVR-400",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 46110.1.100869.65"
            }
          ]
        },
        {
          "vendor": "TAKENAKA ENGINEERING CO., LTD.",
          "product": "HDVR-800",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 53210.1.900103.65"
            }
          ]
        },
        {
          "vendor": "TAKENAKA ENGINEERING CO., LTD.",
          "product": "HDVR-1600",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 53310.1.900111.65"
            }
          ]
        },
        {
          "vendor": "TAKENAKA ENGINEERING CO., LTD.",
          "product": "AHD04T-A",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 7xx10.1.900055.65"
            }
          ]
        },
        {
          "vendor": "TAKENAKA ENGINEERING CO., LTD.",
          "product": "AHD08T-A",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 7xx10.1.900055.65"
            }
          ]
        },
        {
          "vendor": "TAKENAKA ENGINEERING CO., LTD.",
          "product": "AHD16T-A",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 7xx10.1.900055.65"
            }
          ]
        },
        {
          "vendor": "TAKENAKA ENGINEERING CO., LTD.",
          "product": "NVR04T-A",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 56x10.1.100540.65"
            }
          ]
        },
        {
          "vendor": "TAKENAKA ENGINEERING CO., LTD.",
          "product": "NVR08T-A",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 56x10.1.100540.65"
            }
          ]
        },
        {
          "vendor": "TAKENAKA ENGINEERING CO., LTD.",
          "product": "NVR16T-A",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 49310.1.100540.65"
            }
          ]
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:o:takenaka_engineering:hdvr-400_firmware:*:*:*:*:*:*:*:*"
          ],
          "vendor": "takenaka_engineering",
          "product": "hdvr-400_firmware",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "46110.1.100869.65",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:o:takenaka_engineering:hdvr-800_firmware:*:*:*:*:*:*:*:*"
          ],
          "vendor": "takenaka_engineering",
          "product": "hdvr-800_firmware",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "53210.1.900103.65",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:o:takenaka_engineering:hdvr-1600_firmware:*:*:*:*:*:*:*:*"
          ],
          "vendor": "takenaka_engineering",
          "product": "hdvr-1600_firmware",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "53310.1.900111.65",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:o:takenaka_engineering:ahd04t-a_firmware:*:*:*:*:*:*:*:*"
          ],
          "vendor": "takenaka_engineering",
          "product": "ahd04t-a_firmware",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "7xx10.1.900055.65",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:o:takenaka_engineering:ahd08t-a_firmware:*:*:*:*:*:*:*:*"
          ],
          "vendor": "takenaka_engineering",
          "product": "ahd08t-a_firmware",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "7xx10.1.900055.65",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:o:takenaka_engineering:ahd16t-a_firmware:*:*:*:*:*:*:*:*"
          ],
          "vendor": "takenaka_engineering",
          "product": "ahd16t-a_firmware",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "7xx10.1.900055.65",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:o:takenaka_engineering:nvr04t-a_firmware:*:*:*:*:*:*:*:*"
          ],
          "vendor": "takenaka_engineering",
          "product": "nvr04t-a_firmware",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "56x10.1.100540.65",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:o:takenaka_engineering:nvr08t-a_firmware:*:*:*:*:*:*:*:*"
          ],
          "vendor": "takenaka_engineering",
          "product": "nvr08t-a_firmware",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "56x10.1.100540.65",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:o:takenaka_engineering:nvr16t-a_firmware:*:*:*:*:*:*:*:*"
          ],
          "vendor": "takenaka_engineering",
          "product": "nvr16t-a_firmware",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "49310.1.100540.65",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-09-18T07:15:02.847",
  "references": [
    {
      "url": "https://jvn.jp/en/vu/JVNVU90142679/",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "https://www.takex-eng.co.jp/ja/news/news.php?s=68",
      "source": "vultures@jpcert.or.jp"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper authentication vulnerability in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de autenticación inadecuada en múltiples grabadoras de video digitales proporcionadas por TAKENAKA ENGINEERING CO., LTD. permite que un atacante autenticado remoto ejecute un comando de sistema operativo arbitrario en el dispositivo o altere la configuración del dispositivo."
    }
  ],
  "lastModified": "2026-06-17T07:48:28.270",
  "sourceIdentifier": "vultures@jpcert.or.jp"
}