Mirai
Vulnerability details
Advisory: SB2024013140 - Multiple vulnerabilities in Hitron Systems Security Camera DVRs
Vulnerable component: DVR HVR-16781
CVE-ID: CVE-2024-22770
CVSSv3 score: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:H/RL:O/RC:C
CWE-ID: CWE-1392 - Use of Default Credentials
Description:
The vulnerability allows a remote attacker to compromise the affected system.
The vulnerability exists due to usage of default administrative credentials. A remote attacker can use default credentials to compromise the affected device.
Note, the vulnerability is being actively exploited in the wild by the Mirai botnet.External links:
https://www.cisa.gov/news-events/ics-advisories/icsa-24-030-04