CVE-2022-45045: OS Command Injection
Published Dec 1, 2022
·Updated
Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated attacker, possibly using the default admin:tlJwpbo6 credentials, can connect to port 34567 and execute arbitrary operating system commands via a crafted JSON file during an upgrade request. Since at least 2021, Xiongmai has applied patches to prevent attackers from using this mechanism to execute telnetd.
Affected Software
360 affected components
Xiongmaitech Mbd6304t
Xiongmaitech Nbd6808t-pl
Xiongmaitech Nbd7004t-p
Xiongmaitech Nbd7008t-p
Xiongmaitech Nbd7016t-f-v2
Xiongmaitech Nbd7024h-p
Xiongmaitech Nbd7024t-p
Xiongmaitech Nbd7804r-f\(ep\)
Xiongmaitech Nbd7804r-f\(hdmi\)
Xiongmaitech Nbd7804r-fw
Xiongmaitech Nbd7804t-pl
Xiongmaitech Nbd7808r-pl\(ep\)
Xiongmaitech Nbd7808r-pl\(hdmi\)
Xiongmaitech Nbd7808t-pl
Xiongmaitech Nbd7904r-fs
Xiongmaitech Nbd7904t-p
Xiongmaitech Nbd7904t-pl
Xiongmaitech Nbd7904t-pl-xpoe
Xiongmaitech Nbd7904t-plc-xpoe
Xiongmaitech Nbd7904t-q
Xiongmaitech Nbd7908t-q
Xiongmaitech Nbd8004r-pl\(ep\)
Xiongmaitech Nbd8004r-yl\(ep\)
Xiongmaitech Nbd8004t-q
Xiongmaitech Nbd8008r-pl
Xiongmaitech Nbd8008r-pl\(ep\)
Xiongmaitech Nbd8008r-yl\(ep\)
Xiongmaitech Nbd8008ra-gl
Xiongmaitech Nbd8008ra-glk
Xiongmaitech Nbd8008ra-ul\(ep\)
Xiongmaitech Nbd8008ra-ula
Xiongmaitech Nbd8008ra-ulk
Xiongmaitech Nbd8008t-q
Xiongmaitech Nbd8009s-ula-v2
Xiongmaitech Nbd8010s-kl-v2
Xiongmaitech Nbd8016r-ul
Xiongmaitech Nbd8016ra-k\(ep\)
Xiongmaitech Nbd8016ra-ul
Xiongmaitech Nbd8016ra-ul\(ep\)
Xiongmaitech Nbd8016ra-ula
Xiongmaitech Nbd8016ra-ulk
Xiongmaitech Nbd8016s-kl-v2
Xiongmaitech Nbd8016s-ula-v2
Xiongmaitech Nbd8016t-q-v2
Xiongmaitech Nbd8025r-ul
Xiongmaitech Nbd8032h4-p
Xiongmaitech Nbd8032h4-q
Xiongmaitech Nbd8032h4-qe
Xiongmaitech Nbd8032h4-ul
Xiongmaitech Nbd8032h8-p
Xiongmaitech Nbd8032h8-qe
Xiongmaitech Nbd8032ra-ul-v2
Xiongmaitech Nbd8064h8-p
Xiongmaitech Nbd80n16ra-kl
Xiongmaitech Nbd80n16ra-kl\(ep\)
Xiongmaitech Nbd80s08s-kl\(ep\)
Xiongmaitech Nbd80s10s-kl
Xiongmaitech Nbd80s16s-kl
Xiongmaitech Nbd80s16s-kl\(ep\)
Xiongmaitech Nbd80x09ra-kl
Xiongmaitech Nbd80x09s-kl
Xiongmaitech Nbd88x09s-kl
Xiongmaitech Nbd8904r-pl
Xiongmaitech Nbd8904r-yl
Xiongmaitech Nbd8904t-gsc-xpoe
Xiongmaitech Nbd8904t-q
Xiongmaitech Nbd8908r-pl
Xiongmaitech Nbd8908r-yl
Xiongmaitech Nbd8908t-pl-xpoe
Xiongmaitech Nbd8908t-plc-xpoe
Xiongmaitech Nbd8916f4-q
Xiongmaitech Nbd8916f8-q
Xiongmaitech Mbd6304t Firmware=4.02.r11.00000117.10001.131900.00000
Xiongmaitech Mbd6304t
Xiongmaitech Nbd6808t-pl Firmware=4.02.r11.c7431119.12001.130000.00000
Xiongmaitech Nbd6808t-pl
Xiongmaitech Nbd7004t-p Firmware
Xiongmaitech Nbd7004t-p
Xiongmaitech Nbd7008t-p Firmware
Xiongmaitech Nbd7008t-p
Xiongmaitech Nbd7016t-f-v2 Firmware
Xiongmaitech Nbd7016t-f-v2
Xiongmaitech Nbd7024h-p Firmware
Xiongmaitech Nbd7024h-p
Xiongmaitech Nbd7024t-p Firmware
Xiongmaitech Nbd7024t-p
Xiongmaitech Nbd7804r-f\(ep\) Firmware
Xiongmaitech Nbd7804r-f\(ep\)
Xiongmaitech Nbd7804r-f\(hdmi\) Firmware
Xiongmaitech Nbd7804r-f\(hdmi\)
Xiongmaitech Nbd7804r-fw Firmware
Xiongmaitech Nbd7804r-fw
Xiongmaitech Nbd7804t-pl Firmware
Xiongmaitech Nbd7804t-pl
Xiongmaitech Nbd7808r-pl\(ep\) Firmware
Xiongmaitech Nbd7808r-pl\(ep\)
Xiongmaitech Nbd7808r-pl\(hdmi\) Firmware
Xiongmaitech Nbd7808r-pl\(hdmi\)
Xiongmaitech Nbd7808t-pl Firmware
Xiongmaitech Nbd7808t-pl
Xiongmaitech Nbd7904r-fs Firmware
Xiongmaitech Nbd7904r-fs
Xiongmaitech Nbd7904t-p Firmware
Xiongmaitech Nbd7904t-p
Xiongmaitech Nbd7904t-pl Firmware
Xiongmaitech Nbd7904t-pl
Xiongmaitech Nbd7904t-pl-xpoe Firmware
Xiongmaitech Nbd7904t-pl-xpoe
Xiongmaitech Nbd7904t-plc-xpoe Firmware
Xiongmaitech Nbd7904t-plc-xpoe
Xiongmaitech Nbd7904t-q Firmware
Xiongmaitech Nbd7904t-q
Xiongmaitech Nbd7908t-q Firmware
Xiongmaitech Nbd7908t-q
Xiongmaitech Nbd8004r-pl\(ep\) Firmware
Xiongmaitech Nbd8004r-pl\(ep\)
Xiongmaitech Nbd8004r-yl\(ep\) Firmware
Xiongmaitech Nbd8004r-yl\(ep\)
Xiongmaitech Nbd8004t-q Firmware
Xiongmaitech Nbd8004t-q
Xiongmaitech Nbd8008r-pl Firmware
Xiongmaitech Nbd8008r-pl
Xiongmaitech Nbd8008r-pl\(ep\) Firmware
Xiongmaitech Nbd8008r-pl\(ep\)
Xiongmaitech Nbd8008r-yl\(ep\) Firmware
Xiongmaitech Nbd8008r-yl\(ep\)
Xiongmaitech Nbd8008ra-gl Firmware
Xiongmaitech Nbd8008ra-gl
Xiongmaitech Nbd8008ra-glk Firmware
Xiongmaitech Nbd8008ra-glk
Xiongmaitech Nbd8008ra-ul\(ep\) Firmware
Xiongmaitech Nbd8008ra-ul\(ep\)
Xiongmaitech Nbd8008ra-ula Firmware
Xiongmaitech Nbd8008ra-ula
Xiongmaitech Nbd8008ra-ulk Firmware
Xiongmaitech Nbd8008ra-ulk
Xiongmaitech Nbd8008t-q Firmware
Xiongmaitech Nbd8008t-q
Xiongmaitech Nbd8009s-ula-v2 Firmware
Xiongmaitech Nbd8009s-ula-v2
Xiongmaitech Nbd8010s-kl-v2 Firmware
Xiongmaitech Nbd8010s-kl-v2
Xiongmaitech Nbd8016r-ul Firmware
Xiongmaitech Nbd8016r-ul
Xiongmaitech Nbd8016ra-k\(ep\) Firmware
Xiongmaitech Nbd8016ra-k\(ep\)
Xiongmaitech Nbd8016ra-ul Firmware
Xiongmaitech Nbd8016ra-ul
Xiongmaitech Nbd8016ra-ul\(ep\) Firmware
Xiongmaitech Nbd8016ra-ul\(ep\)
Xiongmaitech Nbd8016ra-ula Firmware
Xiongmaitech Nbd8016ra-ula
Xiongmaitech Nbd8016ra-ulk Firmware
Xiongmaitech Nbd8016ra-ulk
Xiongmaitech Nbd8016s-kl-v2 Firmware
Xiongmaitech Nbd8016s-kl-v2
Xiongmaitech Nbd8016s-ula-v2 Firmware
Xiongmaitech Nbd8016s-ula-v2
Xiongmaitech Nbd8016t-q-v2 Firmware
Xiongmaitech Nbd8016t-q-v2
Xiongmaitech Nbd8025r-ul Firmware
Xiongmaitech Nbd8025r-ul
Xiongmaitech Nbd8032h4-p Firmware
Xiongmaitech Nbd8032h4-p
Xiongmaitech Nbd8032h4-q Firmware
Xiongmaitech Nbd8032h4-q
Xiongmaitech Nbd8032h4-qe Firmware
Xiongmaitech Nbd8032h4-qe
Xiongmaitech Nbd8032h4-ul Firmware
Xiongmaitech Nbd8032h4-ul
Xiongmaitech Nbd8032h8-p Firmware
Xiongmaitech Nbd8032h8-p
Xiongmaitech Nbd8032h8-qe Firmware
Xiongmaitech Nbd8032h8-qe
Xiongmaitech Nbd8032ra-ul-v2 Firmware
Xiongmaitech Nbd8032ra-ul-v2
Xiongmaitech Nbd8064h8-p Firmware
Xiongmaitech Nbd8064h8-p
Xiongmaitech Nbd80n16ra-kl Firmware
Xiongmaitech Nbd80n16ra-kl
Xiongmaitech Nbd80n16ra-kl\(ep\) Firmware
Xiongmaitech Nbd80n16ra-kl\(ep\)
Xiongmaitech Nbd80s08s-kl\(ep\) Firmware
Xiongmaitech Nbd80s08s-kl\(ep\)
Xiongmaitech Nbd80s10s-kl Firmware
Xiongmaitech Nbd80s10s-kl
Xiongmaitech Nbd80s16s-kl Firmware
Xiongmaitech Nbd80s16s-kl
Xiongmaitech Nbd80s16s-kl\(ep\) Firmware
Xiongmaitech Nbd80s16s-kl\(ep\)
Xiongmaitech Nbd80x09ra-kl Firmware
Xiongmaitech Nbd80x09ra-kl
Xiongmaitech Nbd80x09s-kl Firmware
Xiongmaitech Nbd80x09s-kl
Xiongmaitech Nbd88x09s-kl Firmware
Xiongmaitech Nbd88x09s-kl
Xiongmaitech Nbd8904r-pl Firmware
Xiongmaitech Nbd8904r-pl
Xiongmaitech Nbd8904r-yl Firmware
Xiongmaitech Nbd8904r-yl
Xiongmaitech Nbd8904t-gsc-xpoe Firmware
Xiongmaitech Nbd8904t-gsc-xpoe
Xiongmaitech Nbd8904t-q Firmware
Xiongmaitech Nbd8904t-q
Xiongmaitech Nbd8908r-pl Firmware
Xiongmaitech Nbd8908r-pl
Xiongmaitech Nbd8908r-yl Firmware
Xiongmaitech Nbd8908r-yl
Xiongmaitech Nbd8908t-pl-xpoe Firmware
Xiongmaitech Nbd8908t-pl-xpoe
Xiongmaitech Nbd8908t-plc-xpoe Firmware
Xiongmaitech Nbd8908t-plc-xpoe
Xiongmaitech Nbd8916f4-q Firmware
Xiongmaitech Nbd8916f4-q
Xiongmaitech Nbd8916f8-q Firmware
Xiongmaitech Nbd8916f8-q
All of the following
Xiongmaitech Mbd6304t Firmware=4.02.r11.00000117.10001.131900.00000
Xiongmaitech Mbd6304t
All of the following
Xiongmaitech Nbd6808t-pl Firmware=4.02.r11.c7431119.12001.130000.00000
Xiongmaitech Nbd6808t-pl
All of the following
Xiongmaitech Nbd7004t-p Firmware
Xiongmaitech Nbd7004t-p
All of the following
Xiongmaitech Nbd7008t-p Firmware
Xiongmaitech Nbd7008t-p
All of the following
Xiongmaitech Nbd7016t-f-v2 Firmware
Xiongmaitech Nbd7016t-f-v2
All of the following
Xiongmaitech Nbd7024h-p Firmware
Xiongmaitech Nbd7024h-p
All of the following
Xiongmaitech Nbd7024t-p Firmware
Xiongmaitech Nbd7024t-p
All of the following
Xiongmaitech Nbd7804r-f\(ep\) Firmware
Xiongmaitech Nbd7804r-f\(ep\)
All of the following
Xiongmaitech Nbd7804r-f\(hdmi\) Firmware
Xiongmaitech Nbd7804r-f\(hdmi\)
All of the following
Xiongmaitech Nbd7804r-fw Firmware
Xiongmaitech Nbd7804r-fw
All of the following
Xiongmaitech Nbd7804t-pl Firmware
Xiongmaitech Nbd7804t-pl
All of the following
Xiongmaitech Nbd7808r-pl\(ep\) Firmware
Xiongmaitech Nbd7808r-pl\(ep\)
All of the following
Xiongmaitech Nbd7808r-pl\(hdmi\) Firmware
Xiongmaitech Nbd7808r-pl\(hdmi\)
All of the following
Xiongmaitech Nbd7808t-pl Firmware
Xiongmaitech Nbd7808t-pl
All of the following
Xiongmaitech Nbd7904r-fs Firmware
Xiongmaitech Nbd7904r-fs
All of the following
Xiongmaitech Nbd7904t-p Firmware
Xiongmaitech Nbd7904t-p
All of the following
Xiongmaitech Nbd7904t-pl Firmware
Xiongmaitech Nbd7904t-pl
All of the following
Xiongmaitech Nbd7904t-pl-xpoe Firmware
Xiongmaitech Nbd7904t-pl-xpoe
All of the following
Xiongmaitech Nbd7904t-plc-xpoe Firmware
Xiongmaitech Nbd7904t-plc-xpoe
All of the following
Xiongmaitech Nbd7904t-q Firmware
Xiongmaitech Nbd7904t-q
All of the following
Xiongmaitech Nbd7908t-q Firmware
Xiongmaitech Nbd7908t-q
All of the following
Xiongmaitech Nbd8004r-pl\(ep\) Firmware
Xiongmaitech Nbd8004r-pl\(ep\)
All of the following
Xiongmaitech Nbd8004r-yl\(ep\) Firmware
Xiongmaitech Nbd8004r-yl\(ep\)
All of the following
Xiongmaitech Nbd8004t-q Firmware
Xiongmaitech Nbd8004t-q
All of the following
Xiongmaitech Nbd8008r-pl Firmware
Xiongmaitech Nbd8008r-pl
All of the following
Xiongmaitech Nbd8008r-pl\(ep\) Firmware
Xiongmaitech Nbd8008r-pl\(ep\)
All of the following
Xiongmaitech Nbd8008r-yl\(ep\) Firmware
Xiongmaitech Nbd8008r-yl\(ep\)
All of the following
Xiongmaitech Nbd8008ra-gl Firmware
Xiongmaitech Nbd8008ra-gl
All of the following
Xiongmaitech Nbd8008ra-glk Firmware
Xiongmaitech Nbd8008ra-glk
All of the following
Xiongmaitech Nbd8008ra-ul\(ep\) Firmware
Xiongmaitech Nbd8008ra-ul\(ep\)
All of the following
Xiongmaitech Nbd8008ra-ula Firmware
Xiongmaitech Nbd8008ra-ula
All of the following
Xiongmaitech Nbd8008ra-ulk Firmware
Xiongmaitech Nbd8008ra-ulk
All of the following
Xiongmaitech Nbd8008t-q Firmware
Xiongmaitech Nbd8008t-q
All of the following
Xiongmaitech Nbd8009s-ula-v2 Firmware
Xiongmaitech Nbd8009s-ula-v2
All of the following
Xiongmaitech Nbd8010s-kl-v2 Firmware
Xiongmaitech Nbd8010s-kl-v2
All of the following
Xiongmaitech Nbd8016r-ul Firmware
Xiongmaitech Nbd8016r-ul
All of the following
Xiongmaitech Nbd8016ra-k\(ep\) Firmware
Xiongmaitech Nbd8016ra-k\(ep\)
All of the following
Xiongmaitech Nbd8016ra-ul Firmware
Xiongmaitech Nbd8016ra-ul
All of the following
Xiongmaitech Nbd8016ra-ul\(ep\) Firmware
Xiongmaitech Nbd8016ra-ul\(ep\)
All of the following
Xiongmaitech Nbd8016ra-ula Firmware
Xiongmaitech Nbd8016ra-ula
All of the following
Xiongmaitech Nbd8016ra-ulk Firmware
Xiongmaitech Nbd8016ra-ulk
All of the following
Xiongmaitech Nbd8016s-kl-v2 Firmware
Xiongmaitech Nbd8016s-kl-v2
All of the following
Xiongmaitech Nbd8016s-ula-v2 Firmware
Xiongmaitech Nbd8016s-ula-v2
All of the following
Xiongmaitech Nbd8016t-q-v2 Firmware
Xiongmaitech Nbd8016t-q-v2
All of the following
Xiongmaitech Nbd8025r-ul Firmware
Xiongmaitech Nbd8025r-ul
All of the following
Xiongmaitech Nbd8032h4-p Firmware
Xiongmaitech Nbd8032h4-p
All of the following
Xiongmaitech Nbd8032h4-q Firmware
Xiongmaitech Nbd8032h4-q
All of the following
Xiongmaitech Nbd8032h4-qe Firmware
Xiongmaitech Nbd8032h4-qe
All of the following
Xiongmaitech Nbd8032h4-ul Firmware
Xiongmaitech Nbd8032h4-ul
All of the following
Xiongmaitech Nbd8032h8-p Firmware
Xiongmaitech Nbd8032h8-p
All of the following
Xiongmaitech Nbd8032h8-qe Firmware
Xiongmaitech Nbd8032h8-qe
All of the following
Xiongmaitech Nbd8032ra-ul-v2 Firmware
Xiongmaitech Nbd8032ra-ul-v2
All of the following
Xiongmaitech Nbd8064h8-p Firmware
Xiongmaitech Nbd8064h8-p
All of the following
Xiongmaitech Nbd80n16ra-kl Firmware
Xiongmaitech Nbd80n16ra-kl
All of the following
Xiongmaitech Nbd80n16ra-kl\(ep\) Firmware
Xiongmaitech Nbd80n16ra-kl\(ep\)
All of the following
Xiongmaitech Nbd80s08s-kl\(ep\) Firmware
Xiongmaitech Nbd80s08s-kl\(ep\)
All of the following
Xiongmaitech Nbd80s10s-kl Firmware
Xiongmaitech Nbd80s10s-kl
All of the following
Xiongmaitech Nbd80s16s-kl Firmware
Xiongmaitech Nbd80s16s-kl
All of the following
Xiongmaitech Nbd80s16s-kl\(ep\) Firmware
Xiongmaitech Nbd80s16s-kl\(ep\)
All of the following
Xiongmaitech Nbd80x09ra-kl Firmware
Xiongmaitech Nbd80x09ra-kl
All of the following
Xiongmaitech Nbd80x09s-kl Firmware
Xiongmaitech Nbd80x09s-kl
All of the following
Xiongmaitech Nbd88x09s-kl Firmware
Xiongmaitech Nbd88x09s-kl
All of the following
Xiongmaitech Nbd8904r-pl Firmware
Xiongmaitech Nbd8904r-pl
All of the following
Xiongmaitech Nbd8904r-yl Firmware
Xiongmaitech Nbd8904r-yl
All of the following
Xiongmaitech Nbd8904t-gsc-xpoe Firmware
Xiongmaitech Nbd8904t-gsc-xpoe
All of the following
Xiongmaitech Nbd8904t-q Firmware
Xiongmaitech Nbd8904t-q
All of the following
Xiongmaitech Nbd8908r-pl Firmware
Xiongmaitech Nbd8908r-pl
All of the following
Xiongmaitech Nbd8908r-yl Firmware
Xiongmaitech Nbd8908r-yl
All of the following
Xiongmaitech Nbd8908t-pl-xpoe Firmware
Xiongmaitech Nbd8908t-pl-xpoe
All of the following
Xiongmaitech Nbd8908t-plc-xpoe Firmware
Xiongmaitech Nbd8908t-plc-xpoe
All of the following
Xiongmaitech Nbd8916f4-q Firmware
Xiongmaitech Nbd8916f4-q
All of the following
Xiongmaitech Nbd8916f8-q Firmware
Xiongmaitech Nbd8916f8-q
Event History
Dec 1, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-45045?
CVE-2022-45045 has a severity rating that indicates significant potential impact due to the ability for authenticated users to execute arbitrary commands as root.
2
How do I fix CVE-2022-45045?
To mitigate CVE-2022-45045, it is recommended to update the affected Xiongmai NVR devices to the latest firmware released by the vendor.
3
What devices are affected by CVE-2022-45045?
CVE-2022-45045 affects various Xiongmai NVR devices including the MBD6304T and NBD6808T-PL models with specific firmware versions.
4
Can CVE-2022-45045 be exploited remotely?
No, CVE-2022-45045 requires an authenticated user to exploit the vulnerability, thereby limiting its remote exploitability.
5
What type of vulnerability is CVE-2022-45045?
CVE-2022-45045 is categorized as a command injection vulnerability allowing users to execute arbitrary commands on the vulnerable devices.