{"advisories":[{"id":"EUVD-2022-47970","source":"euvd","title":"Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated attacker, possibly using the default admin:tlJwpbo6 credentials, can connect to port 34567 and execute arbitrary operating system commands via a crafted JSON file during an upgrade request. Since at least 2021, Xiongmai has applied patches to prevent attackers from using this mechanism to execute telnetd.","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-47970"}],"cve":"CVE-2022-45045","epss":{"score":0.02431},"mitre":{"cpes":[],"created":"2022-12-01T00:00:00+00:00","description":"Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated attacker, possibly using the default admin:tlJwpbo6 credentials, can connect to port 34567 and execute arbitrary operating system commands via a crafted JSON file during an upgrade request. Since at least 2021, Xiongmai has applied patches to prevent attackers from using this mechanism to execute telnetd.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{}},"mitre_repo_path":"cves/2022/45xxx/CVE-2022-45045.json","references":["https://vulncheck.com/blog/xiongmai-iot-exploitation"],"title":null,"updated":"2025-04-24T20:09:06.565000+00:00","vendors":[],"weaknesses":[]},"nvd":{"cpes":["cpe:2.3:h:xiongmaitech:mbd6304t:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd6808t-pl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7004t-p:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7004t-p:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7008t-p:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7008t-p:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7016t-f-v2:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7016t-f-v2:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7024h-p:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7024h-p:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7024t-p:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7024t-p:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7804r-f\\(ep\\):*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7804r-f\\(ep\\):-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7804r-f\\(hdmi\\):*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7804r-f\\(hdmi\\):-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7804r-fw:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7804r-fw:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7804t-pl:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7804t-pl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7808r-pl\\(ep\\):*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7808r-pl\\(ep\\):-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7808r-pl\\(hdmi\\):*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7808r-pl\\(hdmi\\):-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7808t-pl:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7808t-pl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7904r-fs:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7904r-fs:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7904t-p:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7904t-p:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7904t-pl-xpoe:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7904t-pl:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7904t-pl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7904t-plc-xpoe:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7904t-q:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7904t-q:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7908t-q:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7908t-q:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8004r-pl\\(ep\\):*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8004r-pl\\(ep\\):-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8004r-yl\\(ep\\):-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8004t-q:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8004t-q:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8008r-pl:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8008r-pl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8008r-pl\\(ep\\):*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8008r-pl\\(ep\\):-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8008r-yl\\(ep\\):-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8008ra-gl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8008ra-glk:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8008ra-ul\\(ep\\):-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8008ra-ula:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8008ra-ulk:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8008t-q:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8008t-q:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8009s-ula-v2:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8010s-kl-v2:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8016r-ul:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8016r-ul:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8016ra-k\\(ep\\):-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8016ra-ul:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8016ra-ul\\(ep\\):-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8016ra-ula:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8016ra-ulk:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8016s-kl-v2:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8016s-ula-v2:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8016t-q-v2:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8016t-q-v2:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8025r-ul:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8025r-ul:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8032h4-p:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8032h4-p:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8032h4-q:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8032h4-q:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8032h4-qe:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8032h4-qe:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8032h4-ul:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8032h8-p:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8032h8-p:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8032h8-qe:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8032h8-qe:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8032ra-ul-v2:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8064h8-p:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8064h8-p:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd80n16ra-kl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd80n16ra-kl\\(ep\\):-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd80s08s-kl\\(ep\\):-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd80s10s-kl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd80s16s-kl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd80s16s-kl\\(ep\\):-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd80x09ra-kl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd80x09s-kl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd88x09s-kl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8904r-pl:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8904r-pl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8904r-yl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8904t-gsc-xpoe:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8904t-q:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8904t-q:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8908r-pl:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8908r-pl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8908r-yl:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8908r-yl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8908t-pl-xpoe:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8908t-plc-xpoe:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8916f4-q:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8916f4-q:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8916f8-q:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8916f8-q:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:mbd6304t_firmware:4.02.r11.00000117.10001.131900.00000:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd6808t-pl_firmware:4.02.r11.c7431119.12001.130000.00000:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7004t-p_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7008t-p_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7016t-f-v2_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7024h-p_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7024t-p_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7804r-f\\(ep\\)_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7804r-f\\(hdmi\\)_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7804r-fw_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7804t-pl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7808r-pl\\(ep\\)_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7808r-pl\\(hdmi\\)_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7808t-pl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7904r-fs_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7904t-p_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7904t-pl-xpoe_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7904t-pl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7904t-plc-xpoe_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7904t-q_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7908t-q_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8004r-pl\\(ep\\)_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8004r-yl\\(ep\\)_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8004t-q_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8008r-pl\\(ep\\)_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8008r-pl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8008r-yl\\(ep\\)_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8008ra-gl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8008ra-glk_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8008ra-ul\\(ep\\)_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8008ra-ula_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8008ra-ulk_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8008t-q_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8009s-ula-v2_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8010s-kl-v2_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8016r-ul_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8016ra-k\\(ep\\)_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8016ra-ul\\(ep\\)_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8016ra-ul_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8016ra-ula_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8016ra-ulk_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8016s-kl-v2_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8016s-ula-v2_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8016t-q-v2_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8025r-ul_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8032h4-p_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8032h4-q_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8032h4-qe_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8032h4-ul_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8032h8-p_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8032h8-qe_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8032ra-ul-v2_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8064h8-p_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd80n16ra-kl\\(ep\\)_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd80n16ra-kl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd80s08s-kl\\(ep\\)_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd80s10s-kl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd80s16s-kl\\(ep\\)_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd80s16s-kl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd80x09ra-kl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd80x09s-kl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd88x09s-kl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8904r-pl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8904r-yl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8904t-gsc-xpoe_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8904t-q_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8908r-pl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8908r-yl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8908t-pl-xpoe_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8908t-plc-xpoe_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8916f4-q_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8916f8-q_firmware:-:*:*:*:*:*:*:*"],"created":"2022-12-01T05:15:12.043000+00:00","description":"Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated attacker, possibly using the default admin:tlJwpbo6 credentials, can connect to port 34567 and execute arbitrary operating system commands via a crafted JSON file during an upgrade request. Since at least 2021, Xiongmai has applied patches to prevent attackers from using this mechanism to execute telnetd.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"cvssV4_0":{}},"nvd_repo_path":"2022/CVE-2022-45045.json","references":["https://vulncheck.com/blog/xiongmai-iot-exploitation"],"title":null,"updated":"2026-06-17T05:09:14.640000+00:00","vendors":["xiongmaitech","xiongmaitech$PRODUCT$mbd6304t","xiongmaitech$PRODUCT$mbd6304t_firmware","xiongmaitech$PRODUCT$nbd6808t-pl","xiongmaitech$PRODUCT$nbd6808t-pl_firmware","xiongmaitech$PRODUCT$nbd7004t-p","xiongmaitech$PRODUCT$nbd7004t-p_firmware","xiongmaitech$PRODUCT$nbd7008t-p","xiongmaitech$PRODUCT$nbd7008t-p_firmware","xiongmaitech$PRODUCT$nbd7016t-f-v2","xiongmaitech$PRODUCT$nbd7016t-f-v2_firmware","xiongmaitech$PRODUCT$nbd7024h-p","xiongmaitech$PRODUCT$nbd7024h-p_firmware","xiongmaitech$PRODUCT$nbd7024t-p","xiongmaitech$PRODUCT$nbd7024t-p_firmware","xiongmaitech$PRODUCT$nbd7804r-f\\(ep\\)","xiongmaitech$PRODUCT$nbd7804r-f\\(ep\\)_firmware","xiongmaitech$PRODUCT$nbd7804r-f\\(hdmi\\)","xiongmaitech$PRODUCT$nbd7804r-f\\(hdmi\\)_firmware","xiongmaitech$PRODUCT$nbd7804r-fw","xiongmaitech$PRODUCT$nbd7804r-fw_firmware","xiongmaitech$PRODUCT$nbd7804t-pl","xiongmaitech$PRODUCT$nbd7804t-pl_firmware","xiongmaitech$PRODUCT$nbd7808r-pl\\(ep\\)","xiongmaitech$PRODUCT$nbd7808r-pl\\(ep\\)_firmware","xiongmaitech$PRODUCT$nbd7808r-pl\\(hdmi\\)","xiongmaitech$PRODUCT$nbd7808r-pl\\(hdmi\\)_firmware","xiongmaitech$PRODUCT$nbd7808t-pl","xiongmaitech$PRODUCT$nbd7808t-pl_firmware","xiongmaitech$PRODUCT$nbd7904r-fs","xiongmaitech$PRODUCT$nbd7904r-fs_firmware","xiongmaitech$PRODUCT$nbd7904t-p","xiongmaitech$PRODUCT$nbd7904t-p_firmware","xiongmaitech$PRODUCT$nbd7904t-pl","xiongmaitech$PRODUCT$nbd7904t-pl-xpoe","xiongmaitech$PRODUCT$nbd7904t-pl-xpoe_firmware","xiongmaitech$PRODUCT$nbd7904t-pl_firmware","xiongmaitech$PRODUCT$nbd7904t-plc-xpoe","xiongmaitech$PRODUCT$nbd7904t-plc-xpoe_firmware","xiongmaitech$PRODUCT$nbd7904t-q","xiongmaitech$PRODUCT$nbd7904t-q_firmware","xiongmaitech$PRODUCT$nbd7908t-q","xiongmaitech$PRODUCT$nbd7908t-q_firmware","xiongmaitech$PRODUCT$nbd8004r-pl\\(ep\\)","xiongmaitech$PRODUCT$nbd8004r-pl\\(ep\\)_firmware","xiongmaitech$PRODUCT$nbd8004r-yl\\(ep\\)","xiongmaitech$PRODUCT$nbd8004r-yl\\(ep\\)_firmware","xiongmaitech$PRODUCT$nbd8004t-q","xiongmaitech$PRODUCT$nbd8004t-q_firmware","xiongmaitech$PRODUCT$nbd8008r-pl","xiongmaitech$PRODUCT$nbd8008r-pl\\(ep\\)","xiongmaitech$PRODUCT$nbd8008r-pl\\(ep\\)_firmware","xiongmaitech$PRODUCT$nbd8008r-pl_firmware","xiongmaitech$PRODUCT$nbd8008r-yl\\(ep\\)","xiongmaitech$PRODUCT$nbd8008r-yl\\(ep\\)_firmware","xiongmaitech$PRODUCT$nbd8008ra-gl","xiongmaitech$PRODUCT$nbd8008ra-gl_firmware","xiongmaitech$PRODUCT$nbd8008ra-glk","xiongmaitech$PRODUCT$nbd8008ra-glk_firmware","xiongmaitech$PRODUCT$nbd8008ra-ul\\(ep\\)","xiongmaitech$PRODUCT$nbd8008ra-ul\\(ep\\)_firmware","xiongmaitech$PRODUCT$nbd8008ra-ula","xiongmaitech$PRODUCT$nbd8008ra-ula_firmware","xiongmaitech$PRODUCT$nbd8008ra-ulk","xiongmaitech$PRODUCT$nbd8008ra-ulk_firmware","xiongmaitech$PRODUCT$nbd8008t-q","xiongmaitech$PRODUCT$nbd8008t-q_firmware","xiongmaitech$PRODUCT$nbd8009s-ula-v2","xiongmaitech$PRODUCT$nbd8009s-ula-v2_firmware","xiongmaitech$PRODUCT$nbd8010s-kl-v2","xiongmaitech$PRODUCT$nbd8010s-kl-v2_firmware","xiongmaitech$PRODUCT$nbd8016r-ul","xiongmaitech$PRODUCT$nbd8016r-ul_firmware","xiongmaitech$PRODUCT$nbd8016ra-k\\(ep\\)","xiongmaitech$PRODUCT$nbd8016ra-k\\(ep\\)_firmware","xiongmaitech$PRODUCT$nbd8016ra-ul","xiongmaitech$PRODUCT$nbd8016ra-ul\\(ep\\)","xiongmaitech$PRODUCT$nbd8016ra-ul\\(ep\\)_firmware","xiongmaitech$PRODUCT$nbd8016ra-ul_firmware","xiongmaitech$PRODUCT$nbd8016ra-ula","xiongmaitech$PRODUCT$nbd8016ra-ula_firmware","xiongmaitech$PRODUCT$nbd8016ra-ulk","xiongmaitech$PRODUCT$nbd8016ra-ulk_firmware","xiongmaitech$PRODUCT$nbd8016s-kl-v2","xiongmaitech$PRODUCT$nbd8016s-kl-v2_firmware","xiongmaitech$PRODUCT$nbd8016s-ula-v2","xiongmaitech$PRODUCT$nbd8016s-ula-v2_firmware","xiongmaitech$PRODUCT$nbd8016t-q-v2","xiongmaitech$PRODUCT$nbd8016t-q-v2_firmware","xiongmaitech$PRODUCT$nbd8025r-ul","xiongmaitech$PRODUCT$nbd8025r-ul_firmware","xiongmaitech$PRODUCT$nbd8032h4-p","xiongmaitech$PRODUCT$nbd8032h4-p_firmware","xiongmaitech$PRODUCT$nbd8032h4-q","xiongmaitech$PRODUCT$nbd8032h4-q_firmware","xiongmaitech$PRODUCT$nbd8032h4-qe","xiongmaitech$PRODUCT$nbd8032h4-qe_firmware","xiongmaitech$PRODUCT$nbd8032h4-ul","xiongmaitech$PRODUCT$nbd8032h4-ul_firmware","xiongmaitech$PRODUCT$nbd8032h8-p","xiongmaitech$PRODUCT$nbd8032h8-p_firmware","xiongmaitech$PRODUCT$nbd8032h8-qe","xiongmaitech$PRODUCT$nbd8032h8-qe_firmware","xiongmaitech$PRODUCT$nbd8032ra-ul-v2","xiongmaitech$PRODUCT$nbd8032ra-ul-v2_firmware","xiongmaitech$PRODUCT$nbd8064h8-p","xiongmaitech$PRODUCT$nbd8064h8-p_firmware","xiongmaitech$PRODUCT$nbd80n16ra-kl","xiongmaitech$PRODUCT$nbd80n16ra-kl\\(ep\\)","xiongmaitech$PRODUCT$nbd80n16ra-kl\\(ep\\)_firmware","xiongmaitech$PRODUCT$nbd80n16ra-kl_firmware","xiongmaitech$PRODUCT$nbd80s08s-kl\\(ep\\)","xiongmaitech$PRODUCT$nbd80s08s-kl\\(ep\\)_firmware","xiongmaitech$PRODUCT$nbd80s10s-kl","xiongmaitech$PRODUCT$nbd80s10s-kl_firmware","xiongmaitech$PRODUCT$nbd80s16s-kl","xiongmaitech$PRODUCT$nbd80s16s-kl\\(ep\\)","xiongmaitech$PRODUCT$nbd80s16s-kl\\(ep\\)_firmware","xiongmaitech$PRODUCT$nbd80s16s-kl_firmware","xiongmaitech$PRODUCT$nbd80x09ra-kl","xiongmaitech$PRODUCT$nbd80x09ra-kl_firmware","xiongmaitech$PRODUCT$nbd80x09s-kl","xiongmaitech$PRODUCT$nbd80x09s-kl_firmware","xiongmaitech$PRODUCT$nbd88x09s-kl","xiongmaitech$PRODUCT$nbd88x09s-kl_firmware","xiongmaitech$PRODUCT$nbd8904r-pl","xiongmaitech$PRODUCT$nbd8904r-pl_firmware","xiongmaitech$PRODUCT$nbd8904r-yl","xiongmaitech$PRODUCT$nbd8904r-yl_firmware","xiongmaitech$PRODUCT$nbd8904t-gsc-xpoe","xiongmaitech$PRODUCT$nbd8904t-gsc-xpoe_firmware","xiongmaitech$PRODUCT$nbd8904t-q","xiongmaitech$PRODUCT$nbd8904t-q_firmware","xiongmaitech$PRODUCT$nbd8908r-pl","xiongmaitech$PRODUCT$nbd8908r-pl_firmware","xiongmaitech$PRODUCT$nbd8908r-yl","xiongmaitech$PRODUCT$nbd8908r-yl_firmware","xiongmaitech$PRODUCT$nbd8908t-pl-xpoe","xiongmaitech$PRODUCT$nbd8908t-pl-xpoe_firmware","xiongmaitech$PRODUCT$nbd8908t-plc-xpoe","xiongmaitech$PRODUCT$nbd8908t-plc-xpoe_firmware","xiongmaitech$PRODUCT$nbd8916f4-q","xiongmaitech$PRODUCT$nbd8916f4-q_firmware","xiongmaitech$PRODUCT$nbd8916f8-q","xiongmaitech$PRODUCT$nbd8916f8-q_firmware"],"weaknesses":["CWE-78"]},"opencve":{"changes":[{"created":"2025-04-24T20:15:00+00:00","data":[{"details":{"added":{"ssvc":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"total"},"version":"2.0.3"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"df25c302-369f-4513-bed0-efd6dcb84137"}],"cpes":{"data":["cpe:2.3:h:xiongmaitech:mbd6304t:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd6808t-pl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7004t-p:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7004t-p:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7008t-p:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7008t-p:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7016t-f-v2:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7016t-f-v2:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7024h-p:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7024h-p:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7024t-p:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7024t-p:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7804r-f\\(ep\\):*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7804r-f\\(ep\\):-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7804r-f\\(hdmi\\):*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7804r-f\\(hdmi\\):-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7804r-fw:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7804r-fw:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7804t-pl:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7804t-pl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7808r-pl\\(ep\\):*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7808r-pl\\(ep\\):-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7808r-pl\\(hdmi\\):*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7808r-pl\\(hdmi\\):-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7808t-pl:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7808t-pl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7904r-fs:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7904r-fs:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7904t-p:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7904t-p:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7904t-pl-xpoe:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7904t-pl:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7904t-pl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7904t-plc-xpoe:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7904t-q:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7904t-q:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7908t-q:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd7908t-q:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8004r-pl\\(ep\\):*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8004r-pl\\(ep\\):-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8004r-yl\\(ep\\):-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8004t-q:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8004t-q:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8008r-pl:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8008r-pl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8008r-pl\\(ep\\):*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8008r-pl\\(ep\\):-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8008r-yl\\(ep\\):-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8008ra-gl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8008ra-glk:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8008ra-ul\\(ep\\):-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8008ra-ula:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8008ra-ulk:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8008t-q:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8008t-q:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8009s-ula-v2:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8010s-kl-v2:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8016r-ul:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8016r-ul:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8016ra-k\\(ep\\):-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8016ra-ul:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8016ra-ul\\(ep\\):-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8016ra-ula:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8016ra-ulk:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8016s-kl-v2:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8016s-ula-v2:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8016t-q-v2:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8016t-q-v2:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8025r-ul:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8025r-ul:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8032h4-p:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8032h4-p:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8032h4-q:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8032h4-q:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8032h4-qe:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8032h4-qe:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8032h4-ul:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8032h8-p:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8032h8-p:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8032h8-qe:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8032h8-qe:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8032ra-ul-v2:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8064h8-p:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8064h8-p:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd80n16ra-kl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd80n16ra-kl\\(ep\\):-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd80s08s-kl\\(ep\\):-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd80s10s-kl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd80s16s-kl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd80s16s-kl\\(ep\\):-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd80x09ra-kl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd80x09s-kl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd88x09s-kl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8904r-pl:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8904r-pl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8904r-yl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8904t-gsc-xpoe:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8904t-q:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8904t-q:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8908r-pl:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8908r-pl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8908r-yl:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8908r-yl:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8908t-pl-xpoe:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8908t-plc-xpoe:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8916f4-q:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8916f4-q:-:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8916f8-q:*:*:*:*:*:*:*:*","cpe:2.3:h:xiongmaitech:nbd8916f8-q:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:mbd6304t_firmware:4.02.r11.00000117.10001.131900.00000:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd6808t-pl_firmware:4.02.r11.c7431119.12001.130000.00000:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7004t-p_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7008t-p_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7016t-f-v2_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7024h-p_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7024t-p_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7804r-f\\(ep\\)_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7804r-f\\(hdmi\\)_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7804r-fw_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7804t-pl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7808r-pl\\(ep\\)_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7808r-pl\\(hdmi\\)_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7808t-pl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7904r-fs_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7904t-p_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7904t-pl-xpoe_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7904t-pl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7904t-plc-xpoe_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7904t-q_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd7908t-q_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8004r-pl\\(ep\\)_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8004r-yl\\(ep\\)_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8004t-q_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8008r-pl\\(ep\\)_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8008r-pl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8008r-yl\\(ep\\)_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8008ra-gl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8008ra-glk_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8008ra-ul\\(ep\\)_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8008ra-ula_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8008ra-ulk_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8008t-q_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8009s-ula-v2_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8010s-kl-v2_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8016r-ul_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8016ra-k\\(ep\\)_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8016ra-ul\\(ep\\)_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8016ra-ul_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8016ra-ula_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8016ra-ulk_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8016s-kl-v2_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8016s-ula-v2_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8016t-q-v2_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8025r-ul_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8032h4-p_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8032h4-q_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8032h4-qe_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8032h4-ul_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8032h8-p_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8032h8-qe_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8032ra-ul-v2_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8064h8-p_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd80n16ra-kl\\(ep\\)_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd80n16ra-kl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd80s08s-kl\\(ep\\)_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd80s10s-kl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd80s16s-kl\\(ep\\)_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd80s16s-kl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd80x09ra-kl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd80x09s-kl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd88x09s-kl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8904r-pl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8904r-yl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8904t-gsc-xpoe_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8904t-q_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8908r-pl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8908r-yl_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8908t-pl-xpoe_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8908t-plc-xpoe_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8916f4-q_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:xiongmaitech:nbd8916f8-q_firmware:-:*:*:*:*:*:*:*"],"providers":["nvd"]},"created":{"data":"2022-12-01T00:00:00+00:00","provider":"mitre"},"description":{"data":"Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated attacker, possibly using the default admin:tlJwpbo6 credentials, can connect to port 34567 and execute arbitrary operating system commands via a crafted JSON file during an upgrade request. Since at least 2021, Xiongmai has applied patches to prevent attackers from using this mechanism to execute telnetd.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{},"provider":null},"cvssV3_0":{"data":{},"provider":null},"cvssV3_1":{"data":{"score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"provider":"vulnrichment"},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.02431},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"total"},"version":"2.0.3"},"provider":"vulnrichment"},"threat_severity":{"data":null,"provider":null}},"references":{"data":["https://vulncheck.com/blog/xiongmai-iot-exploitation"],"providers":["mitre","nvd"]},"title":{"data":null,"provider":null},"updated":{"data":"2025-04-24T20:15:29.603000+00:00","provider":"nvd"},"vendors":{"data":["xiongmaitech","xiongmaitech$PRODUCT$mbd6304t","xiongmaitech$PRODUCT$mbd6304t_firmware","xiongmaitech$PRODUCT$nbd6808t-pl","xiongmaitech$PRODUCT$nbd6808t-pl_firmware","xiongmaitech$PRODUCT$nbd7004t-p","xiongmaitech$PRODUCT$nbd7004t-p_firmware","xiongmaitech$PRODUCT$nbd7008t-p","xiongmaitech$PRODUCT$nbd7008t-p_firmware","xiongmaitech$PRODUCT$nbd7016t-f-v2","xiongmaitech$PRODUCT$nbd7016t-f-v2_firmware","xiongmaitech$PRODUCT$nbd7024h-p","xiongmaitech$PRODUCT$nbd7024h-p_firmware","xiongmaitech$PRODUCT$nbd7024t-p","xiongmaitech$PRODUCT$nbd7024t-p_firmware","xiongmaitech$PRODUCT$nbd7804r-f\\(ep\\)","xiongmaitech$PRODUCT$nbd7804r-f\\(ep\\)_firmware","xiongmaitech$PRODUCT$nbd7804r-f\\(hdmi\\)","xiongmaitech$PRODUCT$nbd7804r-f\\(hdmi\\)_firmware","xiongmaitech$PRODUCT$nbd7804r-fw","xiongmaitech$PRODUCT$nbd7804r-fw_firmware","xiongmaitech$PRODUCT$nbd7804t-pl","xiongmaitech$PRODUCT$nbd7804t-pl_firmware","xiongmaitech$PRODUCT$nbd7808r-pl\\(ep\\)","xiongmaitech$PRODUCT$nbd7808r-pl\\(ep\\)_firmware","xiongmaitech$PRODUCT$nbd7808r-pl\\(hdmi\\)","xiongmaitech$PRODUCT$nbd7808r-pl\\(hdmi\\)_firmware","xiongmaitech$PRODUCT$nbd7808t-pl","xiongmaitech$PRODUCT$nbd7808t-pl_firmware","xiongmaitech$PRODUCT$nbd7904r-fs","xiongmaitech$PRODUCT$nbd7904r-fs_firmware","xiongmaitech$PRODUCT$nbd7904t-p","xiongmaitech$PRODUCT$nbd7904t-p_firmware","xiongmaitech$PRODUCT$nbd7904t-pl","xiongmaitech$PRODUCT$nbd7904t-pl-xpoe","xiongmaitech$PRODUCT$nbd7904t-pl-xpoe_firmware","xiongmaitech$PRODUCT$nbd7904t-pl_firmware","xiongmaitech$PRODUCT$nbd7904t-plc-xpoe","xiongmaitech$PRODUCT$nbd7904t-plc-xpoe_firmware","xiongmaitech$PRODUCT$nbd7904t-q","xiongmaitech$PRODUCT$nbd7904t-q_firmware","xiongmaitech$PRODUCT$nbd7908t-q","xiongmaitech$PRODUCT$nbd7908t-q_firmware","xiongmaitech$PRODUCT$nbd8004r-pl\\(ep\\)","xiongmaitech$PRODUCT$nbd8004r-pl\\(ep\\)_firmware","xiongmaitech$PRODUCT$nbd8004r-yl\\(ep\\)","xiongmaitech$PRODUCT$nbd8004r-yl\\(ep\\)_firmware","xiongmaitech$PRODUCT$nbd8004t-q","xiongmaitech$PRODUCT$nbd8004t-q_firmware","xiongmaitech$PRODUCT$nbd8008r-pl","xiongmaitech$PRODUCT$nbd8008r-pl\\(ep\\)","xiongmaitech$PRODUCT$nbd8008r-pl\\(ep\\)_firmware","xiongmaitech$PRODUCT$nbd8008r-pl_firmware","xiongmaitech$PRODUCT$nbd8008r-yl\\(ep\\)","xiongmaitech$PRODUCT$nbd8008r-yl\\(ep\\)_firmware","xiongmaitech$PRODUCT$nbd8008ra-gl","xiongmaitech$PRODUCT$nbd8008ra-gl_firmware","xiongmaitech$PRODUCT$nbd8008ra-glk","xiongmaitech$PRODUCT$nbd8008ra-glk_firmware","xiongmaitech$PRODUCT$nbd8008ra-ul\\(ep\\)","xiongmaitech$PRODUCT$nbd8008ra-ul\\(ep\\)_firmware","xiongmaitech$PRODUCT$nbd8008ra-ula","xiongmaitech$PRODUCT$nbd8008ra-ula_firmware","xiongmaitech$PRODUCT$nbd8008ra-ulk","xiongmaitech$PRODUCT$nbd8008ra-ulk_firmware","xiongmaitech$PRODUCT$nbd8008t-q","xiongmaitech$PRODUCT$nbd8008t-q_firmware","xiongmaitech$PRODUCT$nbd8009s-ula-v2","xiongmaitech$PRODUCT$nbd8009s-ula-v2_firmware","xiongmaitech$PRODUCT$nbd8010s-kl-v2","xiongmaitech$PRODUCT$nbd8010s-kl-v2_firmware","xiongmaitech$PRODUCT$nbd8016r-ul","xiongmaitech$PRODUCT$nbd8016r-ul_firmware","xiongmaitech$PRODUCT$nbd8016ra-k\\(ep\\)","xiongmaitech$PRODUCT$nbd8016ra-k\\(ep\\)_firmware","xiongmaitech$PRODUCT$nbd8016ra-ul","xiongmaitech$PRODUCT$nbd8016ra-ul\\(ep\\)","xiongmaitech$PRODUCT$nbd8016ra-ul\\(ep\\)_firmware","xiongmaitech$PRODUCT$nbd8016ra-ul_firmware","xiongmaitech$PRODUCT$nbd8016ra-ula","xiongmaitech$PRODUCT$nbd8016ra-ula_firmware","xiongmaitech$PRODUCT$nbd8016ra-ulk","xiongmaitech$PRODUCT$nbd8016ra-ulk_firmware","xiongmaitech$PRODUCT$nbd8016s-kl-v2","xiongmaitech$PRODUCT$nbd8016s-kl-v2_firmware","xiongmaitech$PRODUCT$nbd8016s-ula-v2","xiongmaitech$PRODUCT$nbd8016s-ula-v2_firmware","xiongmaitech$PRODUCT$nbd8016t-q-v2","xiongmaitech$PRODUCT$nbd8016t-q-v2_firmware","xiongmaitech$PRODUCT$nbd8025r-ul","xiongmaitech$PRODUCT$nbd8025r-ul_firmware","xiongmaitech$PRODUCT$nbd8032h4-p","xiongmaitech$PRODUCT$nbd8032h4-p_firmware","xiongmaitech$PRODUCT$nbd8032h4-q","xiongmaitech$PRODUCT$nbd8032h4-q_firmware","xiongmaitech$PRODUCT$nbd8032h4-qe","xiongmaitech$PRODUCT$nbd8032h4-qe_firmware","xiongmaitech$PRODUCT$nbd8032h4-ul","xiongmaitech$PRODUCT$nbd8032h4-ul_firmware","xiongmaitech$PRODUCT$nbd8032h8-p","xiongmaitech$PRODUCT$nbd8032h8-p_firmware","xiongmaitech$PRODUCT$nbd8032h8-qe","xiongmaitech$PRODUCT$nbd8032h8-qe_firmware","xiongmaitech$PRODUCT$nbd8032ra-ul-v2","xiongmaitech$PRODUCT$nbd8032ra-ul-v2_firmware","xiongmaitech$PRODUCT$nbd8064h8-p","xiongmaitech$PRODUCT$nbd8064h8-p_firmware","xiongmaitech$PRODUCT$nbd80n16ra-kl","xiongmaitech$PRODUCT$nbd80n16ra-kl\\(ep\\)","xiongmaitech$PRODUCT$nbd80n16ra-kl\\(ep\\)_firmware","xiongmaitech$PRODUCT$nbd80n16ra-kl_firmware","xiongmaitech$PRODUCT$nbd80s08s-kl\\(ep\\)","xiongmaitech$PRODUCT$nbd80s08s-kl\\(ep\\)_firmware","xiongmaitech$PRODUCT$nbd80s10s-kl","xiongmaitech$PRODUCT$nbd80s10s-kl_firmware","xiongmaitech$PRODUCT$nbd80s16s-kl","xiongmaitech$PRODUCT$nbd80s16s-kl\\(ep\\)","xiongmaitech$PRODUCT$nbd80s16s-kl\\(ep\\)_firmware","xiongmaitech$PRODUCT$nbd80s16s-kl_firmware","xiongmaitech$PRODUCT$nbd80x09ra-kl","xiongmaitech$PRODUCT$nbd80x09ra-kl_firmware","xiongmaitech$PRODUCT$nbd80x09s-kl","xiongmaitech$PRODUCT$nbd80x09s-kl_firmware","xiongmaitech$PRODUCT$nbd88x09s-kl","xiongmaitech$PRODUCT$nbd88x09s-kl_firmware","xiongmaitech$PRODUCT$nbd8904r-pl","xiongmaitech$PRODUCT$nbd8904r-pl_firmware","xiongmaitech$PRODUCT$nbd8904r-yl","xiongmaitech$PRODUCT$nbd8904r-yl_firmware","xiongmaitech$PRODUCT$nbd8904t-gsc-xpoe","xiongmaitech$PRODUCT$nbd8904t-gsc-xpoe_firmware","xiongmaitech$PRODUCT$nbd8904t-q","xiongmaitech$PRODUCT$nbd8904t-q_firmware","xiongmaitech$PRODUCT$nbd8908r-pl","xiongmaitech$PRODUCT$nbd8908r-pl_firmware","xiongmaitech$PRODUCT$nbd8908r-yl","xiongmaitech$PRODUCT$nbd8908r-yl_firmware","xiongmaitech$PRODUCT$nbd8908t-pl-xpoe","xiongmaitech$PRODUCT$nbd8908t-pl-xpoe_firmware","xiongmaitech$PRODUCT$nbd8908t-plc-xpoe","xiongmaitech$PRODUCT$nbd8908t-plc-xpoe_firmware","xiongmaitech$PRODUCT$nbd8916f4-q","xiongmaitech$PRODUCT$nbd8916f4-q_firmware","xiongmaitech$PRODUCT$nbd8916f8-q","xiongmaitech$PRODUCT$nbd8916f8-q_firmware"],"providers":["nvd"]},"weaknesses":{"data":["CWE-78"],"providers":["nvd","vulnrichment"]}},"vulnrichment":{"cpes":[],"created":"2022-12-01T00:00:00+00:00","description":"Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated attacker, possibly using the default admin:tlJwpbo6 credentials, can connect to port 34567 and execute arbitrary operating system commands via a crafted JSON file during an upgrade request. Since at least 2021, Xiongmai has applied patches to prevent attackers from using this mechanism to execute telnetd.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"cvssV4_0":{},"kev":{},"ssvc":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"total"},"version":"2.0.3"}},"references":[],"title":null,"updated":"2025-04-24T20:08:22.764000+00:00","vendors":[],"vulnrichment_repo_path":"2022/45xxx/CVE-2022-45045.json","weaknesses":["CWE-78"]}}