Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a "Cookie: uid=admin" header, as demonstrated by a device.rsp?opt=user&cmd=list request that provides credentials within JSON data in a response.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 4 products
Cytellite recent detection targeting CVE-2018-9995 — http://Vpsvault.host Ltd Visit -- https://cti.loginsoft.com/ip/45.205.1.80 #Loginsoft #Cytellite #Cybersecurity #CVE20189995 #LOVI #ThreatIntelligence #Infosecurity #AI https://t.co/M5tJeNWd0w
Post summary
The tweet mentions a detection of CVE-2018‑9995 but provides no further exploitation, patch, or technical details.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tbkvision | tbk-dvr4104 | - | - | - |
| OS | tbkvision | tbk-dvr4104_firmware | - | - | - |
| HW | tbkvision | tbk-dvr4216 | - | - | - |
| OS | tbkvision | tbk-dvr4216_firmware | - | - | - |