CVE-2022-35733
Assigner: jpcert
Published: 2022-08-23T01:35:12
State: PUBLISHED
affected: product: UNIMO Technology digital video recorders UDR-JA1004/JA1008/JA1016 and UDR-JA1016
vendor: UNIMO Technology Co., Ltd
versions: status: affected
version: UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier
descriptions: value: Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders (UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier) allows a remote unauthenticated attacker to execute an arbitrary OS command by sending a specially crafted request to the affected device web interface.
problemTypes: descriptions: description: Missing Authentication for Critical Function
type: text