ICSA-24-030-04

Hitron Systems Security Camera DVR

view advisory published 2024-01-30

Successful exploitation of these vulnerabilities could allow an attacker to affect the availability of the product through exploitation of an improper input validation vulnerability and default credentials.

describes (6)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-23842US	high7.5OT elevated	0.50% (42nd)	—	2024-01-23
Improper Input Validation in Hitron Systems DVR LGUVR-16H 1.02~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
CVE-2024-22772US	high7.5OT elevated	0.50% (42nd)	—	2024-01-23
Improper Input Validation in Hitron Systems DVR LGUVR-8H 1.02~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
CVE-2024-22771US	high7.5OT elevated	0.50% (42nd)	—	2024-01-23
Improper Input Validation in Hitron Systems DVR LGUVR-4H 1.02~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
CVE-2024-22770US	high7.5OT elevated	0.50% (42nd)	—	2024-01-23
Improper Input Validation in Hitron Systems DVR HVR-16781 1.03~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
CVE-2024-22769US	high7.5OT elevated	0.50% (42nd)	—	2024-01-23
Improper Input Validation in Hitron Systems DVR HVR-8781 1.03~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
CVE-2024-22768US	high7.5OT elevated	0.56% (47th)	—	2024-01-23
Improper Input Validation in Hitron Systems DVR HVR-4781 1.03~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.

references

External citations — patches, advisories, analysis.

ICS Advisory ICSA-24-030-04 JSONself
Recommended Practicesexternal
ICSA Advisory ICSA-24-030-04 - Web Versionself
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal

remediations (7)

MitigationDVR HVR-16781
Hitron Systems has released the following updates for their DVR:
MitigationDVR HVR-4781
Hitron Systems has released the following updates for their DVR:
MitigationDVR HVR-8781
Hitron Systems has released the following updates for their DVR:
MitigationDVR LGUVR-16H
Hitron Systems has released the following updates for their DVR:
MitigationDVR LGUVR-4H
Hitron Systems has released the following updates for their DVR:
MitigationDVR LGUVR-8H
Hitron Systems has released the following updates for their DVR:
FixedDVR HVR-4781
DVR HVR-4781: Version 4.03
http://www.hitron.co.kr/firmware/?uid=123&mod=document&pageid=1

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan