{
  "advisories": [
    {
      "id": "EUVD-2022-47970",
      "source": "euvd",
      "title": "Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated attacker, possibly using the default admin:tlJwpbo6 credentials, can connect to port 34567 and execute arbitrary operating system commands via a crafted JSON file during an upgrade request. Since at least 2021, Xiongmai has applied patches to prevent attackers from using this mechanism to execute telnetd.",
      "url": "https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-47970"
    }
  ],
  "cve": "CVE-2022-45045",
  "epss": {
    "score": 0.02431
  },
  "mitre": {
    "cpes": [],
    "created": "2022-12-01T00:00:00+00:00",
    "description": "Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated attacker, possibly using the default admin:tlJwpbo6 credentials, can connect to port 34567 and execute arbitrary operating system commands via a crafted JSON file during an upgrade request. Since at least 2021, Xiongmai has applied patches to prevent attackers from using this mechanism to execute telnetd.",
    "metrics": {
      "cvssV2_0": {},
      "cvssV3_0": {},
      "cvssV3_1": {},
      "cvssV4_0": {}
    },
    "mitre_repo_path": "cves/2022/45xxx/CVE-2022-45045.json",
    "references": [
      "https://vulncheck.com/blog/xiongmai-iot-exploitation"
    ],
    "title": null,
    "updated": "2025-04-24T20:09:06.565000+00:00",
    "vendors": [],
    "weaknesses": []
  },
  "nvd": {
    "cpes": [
      "cpe:2.3:h:xiongmaitech:mbd6304t:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd6808t-pl:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7004t-p:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7004t-p:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7008t-p:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7008t-p:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7016t-f-v2:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7016t-f-v2:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7024h-p:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7024h-p:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7024t-p:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7024t-p:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7804r-f\\(ep\\):*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7804r-f\\(ep\\):-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7804r-f\\(hdmi\\):*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7804r-f\\(hdmi\\):-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7804r-fw:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7804r-fw:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7804t-pl:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7804t-pl:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7808r-pl\\(ep\\):*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7808r-pl\\(ep\\):-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7808r-pl\\(hdmi\\):*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7808r-pl\\(hdmi\\):-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7808t-pl:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7808t-pl:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7904r-fs:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7904r-fs:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7904t-p:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7904t-p:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7904t-pl-xpoe:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7904t-pl:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7904t-pl:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7904t-plc-xpoe:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7904t-q:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7904t-q:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7908t-q:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd7908t-q:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8004r-pl\\(ep\\):*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8004r-pl\\(ep\\):-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8004r-yl\\(ep\\):-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8004t-q:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8004t-q:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8008r-pl:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8008r-pl:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8008r-pl\\(ep\\):*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8008r-pl\\(ep\\):-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8008r-yl\\(ep\\):-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8008ra-gl:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8008ra-glk:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8008ra-ul\\(ep\\):-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8008ra-ula:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8008ra-ulk:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8008t-q:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8008t-q:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8009s-ula-v2:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8010s-kl-v2:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8016r-ul:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8016r-ul:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8016ra-k\\(ep\\):-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8016ra-ul:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8016ra-ul\\(ep\\):-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8016ra-ula:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8016ra-ulk:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8016s-kl-v2:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8016s-ula-v2:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8016t-q-v2:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8016t-q-v2:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8025r-ul:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8025r-ul:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8032h4-p:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8032h4-p:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8032h4-q:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8032h4-q:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8032h4-qe:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8032h4-qe:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8032h4-ul:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8032h8-p:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8032h8-p:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8032h8-qe:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8032h8-qe:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8032ra-ul-v2:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8064h8-p:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8064h8-p:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd80n16ra-kl:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd80n16ra-kl\\(ep\\):-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd80s08s-kl\\(ep\\):-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd80s10s-kl:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd80s16s-kl:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd80s16s-kl\\(ep\\):-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd80x09ra-kl:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd80x09s-kl:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd88x09s-kl:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8904r-pl:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8904r-pl:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8904r-yl:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8904t-gsc-xpoe:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8904t-q:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8904t-q:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8908r-pl:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8908r-pl:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8908r-yl:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8908r-yl:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8908t-pl-xpoe:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8908t-plc-xpoe:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8916f4-q:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8916f4-q:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8916f8-q:*:*:*:*:*:*:*:*",
      "cpe:2.3:h:xiongmaitech:nbd8916f8-q:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:mbd6304t_firmware:4.02.r11.00000117.10001.131900.00000:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd6808t-pl_firmware:4.02.r11.c7431119.12001.130000.00000:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd7004t-p_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd7008t-p_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd7016t-f-v2_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd7024h-p_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd7024t-p_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd7804r-f\\(ep\\)_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd7804r-f\\(hdmi\\)_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd7804r-fw_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd7804t-pl_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd7808r-pl\\(ep\\)_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd7808r-pl\\(hdmi\\)_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd7808t-pl_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd7904r-fs_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd7904t-p_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd7904t-pl-xpoe_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd7904t-pl_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd7904t-plc-xpoe_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd7904t-q_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd7908t-q_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8004r-pl\\(ep\\)_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8004r-yl\\(ep\\)_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8004t-q_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8008r-pl\\(ep\\)_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8008r-pl_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8008r-yl\\(ep\\)_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8008ra-gl_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8008ra-glk_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8008ra-ul\\(ep\\)_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8008ra-ula_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8008ra-ulk_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8008t-q_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8009s-ula-v2_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8010s-kl-v2_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8016r-ul_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8016ra-k\\(ep\\)_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8016ra-ul\\(ep\\)_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8016ra-ul_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8016ra-ula_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8016ra-ulk_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8016s-kl-v2_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8016s-ula-v2_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8016t-q-v2_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8025r-ul_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8032h4-p_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8032h4-q_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8032h4-qe_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8032h4-ul_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8032h8-p_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8032h8-qe_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8032ra-ul-v2_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8064h8-p_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd80n16ra-kl\\(ep\\)_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd80n16ra-kl_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd80s08s-kl\\(ep\\)_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd80s10s-kl_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd80s16s-kl\\(ep\\)_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd80s16s-kl_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd80x09ra-kl_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd80x09s-kl_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd88x09s-kl_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8904r-pl_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8904r-yl_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8904t-gsc-xpoe_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8904t-q_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8908r-pl_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8908r-yl_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8908t-pl-xpoe_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8908t-plc-xpoe_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8916f4-q_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:xiongmaitech:nbd8916f8-q_firmware:-:*:*:*:*:*:*:*"
    ],
    "created": "2022-12-01T05:15:12.043000+00:00",
    "description": "Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated attacker, possibly using the default admin:tlJwpbo6 credentials, can connect to port 34567 and execute arbitrary operating system commands via a crafted JSON file during an upgrade request. Since at least 2021, Xiongmai has applied patches to prevent attackers from using this mechanism to execute telnetd.",
    "metrics": {
      "cvssV2_0": {},
      "cvssV3_0": {},
      "cvssV3_1": {
        "score": 8.8,
        "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
      },
      "cvssV4_0": {}
    },
    "nvd_repo_path": "2022/CVE-2022-45045.json",
    "references": [
      "https://vulncheck.com/blog/xiongmai-iot-exploitation"
    ],
    "title": null,
    "updated": "2026-06-17T05:09:14.640000+00:00",
    "vendors": [
      "xiongmaitech",
      "xiongmaitech$PRODUCT$mbd6304t",
      "xiongmaitech$PRODUCT$mbd6304t_firmware",
      "xiongmaitech$PRODUCT$nbd6808t-pl",
      "xiongmaitech$PRODUCT$nbd6808t-pl_firmware",
      "xiongmaitech$PRODUCT$nbd7004t-p",
      "xiongmaitech$PRODUCT$nbd7004t-p_firmware",
      "xiongmaitech$PRODUCT$nbd7008t-p",
      "xiongmaitech$PRODUCT$nbd7008t-p_firmware",
      "xiongmaitech$PRODUCT$nbd7016t-f-v2",
      "xiongmaitech$PRODUCT$nbd7016t-f-v2_firmware",
      "xiongmaitech$PRODUCT$nbd7024h-p",
      "xiongmaitech$PRODUCT$nbd7024h-p_firmware",
      "xiongmaitech$PRODUCT$nbd7024t-p",
      "xiongmaitech$PRODUCT$nbd7024t-p_firmware",
      "xiongmaitech$PRODUCT$nbd7804r-f\\(ep\\)",
      "xiongmaitech$PRODUCT$nbd7804r-f\\(ep\\)_firmware",
      "xiongmaitech$PRODUCT$nbd7804r-f\\(hdmi\\)",
      "xiongmaitech$PRODUCT$nbd7804r-f\\(hdmi\\)_firmware",
      "xiongmaitech$PRODUCT$nbd7804r-fw",
      "xiongmaitech$PRODUCT$nbd7804r-fw_firmware",
      "xiongmaitech$PRODUCT$nbd7804t-pl",
      "xiongmaitech$PRODUCT$nbd7804t-pl_firmware",
      "xiongmaitech$PRODUCT$nbd7808r-pl\\(ep\\)",
      "xiongmaitech$PRODUCT$nbd7808r-pl\\(ep\\)_firmware",
      "xiongmaitech$PRODUCT$nbd7808r-pl\\(hdmi\\)",
      "xiongmaitech$PRODUCT$nbd7808r-pl\\(hdmi\\)_firmware",
      "xiongmaitech$PRODUCT$nbd7808t-pl",
      "xiongmaitech$PRODUCT$nbd7808t-pl_firmware",
      "xiongmaitech$PRODUCT$nbd7904r-fs",
      "xiongmaitech$PRODUCT$nbd7904r-fs_firmware",
      "xiongmaitech$PRODUCT$nbd7904t-p",
      "xiongmaitech$PRODUCT$nbd7904t-p_firmware",
      "xiongmaitech$PRODUCT$nbd7904t-pl",
      "xiongmaitech$PRODUCT$nbd7904t-pl-xpoe",
      "xiongmaitech$PRODUCT$nbd7904t-pl-xpoe_firmware",
      "xiongmaitech$PRODUCT$nbd7904t-pl_firmware",
      "xiongmaitech$PRODUCT$nbd7904t-plc-xpoe",
      "xiongmaitech$PRODUCT$nbd7904t-plc-xpoe_firmware",
      "xiongmaitech$PRODUCT$nbd7904t-q",
      "xiongmaitech$PRODUCT$nbd7904t-q_firmware",
      "xiongmaitech$PRODUCT$nbd7908t-q",
      "xiongmaitech$PRODUCT$nbd7908t-q_firmware",
      "xiongmaitech$PRODUCT$nbd8004r-pl\\(ep\\)",
      "xiongmaitech$PRODUCT$nbd8004r-pl\\(ep\\)_firmware",
      "xiongmaitech$PRODUCT$nbd8004r-yl\\(ep\\)",
      "xiongmaitech$PRODUCT$nbd8004r-yl\\(ep\\)_firmware",
      "xiongmaitech$PRODUCT$nbd8004t-q",
      "xiongmaitech$PRODUCT$nbd8004t-q_firmware",
      "xiongmaitech$PRODUCT$nbd8008r-pl",
      "xiongmaitech$PRODUCT$nbd8008r-pl\\(ep\\)",
      "xiongmaitech$PRODUCT$nbd8008r-pl\\(ep\\)_firmware",
      "xiongmaitech$PRODUCT$nbd8008r-pl_firmware",
      "xiongmaitech$PRODUCT$nbd8008r-yl\\(ep\\)",
      "xiongmaitech$PRODUCT$nbd8008r-yl\\(ep\\)_firmware",
      "xiongmaitech$PRODUCT$nbd8008ra-gl",
      "xiongmaitech$PRODUCT$nbd8008ra-gl_firmware",
      "xiongmaitech$PRODUCT$nbd8008ra-glk",
      "xiongmaitech$PRODUCT$nbd8008ra-glk_firmware",
      "xiongmaitech$PRODUCT$nbd8008ra-ul\\(ep\\)",
      "xiongmaitech$PRODUCT$nbd8008ra-ul\\(ep\\)_firmware",
      "xiongmaitech$PRODUCT$nbd8008ra-ula",
      "xiongmaitech$PRODUCT$nbd8008ra-ula_firmware",
      "xiongmaitech$PRODUCT$nbd8008ra-ulk",
      "xiongmaitech$PRODUCT$nbd8008ra-ulk_firmware",
      "xiongmaitech$PRODUCT$nbd8008t-q",
      "xiongmaitech$PRODUCT$nbd8008t-q_firmware",
      "xiongmaitech$PRODUCT$nbd8009s-ula-v2",
      "xiongmaitech$PRODUCT$nbd8009s-ula-v2_firmware",
      "xiongmaitech$PRODUCT$nbd8010s-kl-v2",
      "xiongmaitech$PRODUCT$nbd8010s-kl-v2_firmware",
      "xiongmaitech$PRODUCT$nbd8016r-ul",
      "xiongmaitech$PRODUCT$nbd8016r-ul_firmware",
      "xiongmaitech$PRODUCT$nbd8016ra-k\\(ep\\)",
      "xiongmaitech$PRODUCT$nbd8016ra-k\\(ep\\)_firmware",
      "xiongmaitech$PRODUCT$nbd8016ra-ul",
      "xiongmaitech$PRODUCT$nbd8016ra-ul\\(ep\\)",
      "xiongmaitech$PRODUCT$nbd8016ra-ul\\(ep\\)_firmware",
      "xiongmaitech$PRODUCT$nbd8016ra-ul_firmware",
      "xiongmaitech$PRODUCT$nbd8016ra-ula",
      "xiongmaitech$PRODUCT$nbd8016ra-ula_firmware",
      "xiongmaitech$PRODUCT$nbd8016ra-ulk",
      "xiongmaitech$PRODUCT$nbd8016ra-ulk_firmware",
      "xiongmaitech$PRODUCT$nbd8016s-kl-v2",
      "xiongmaitech$PRODUCT$nbd8016s-kl-v2_firmware",
      "xiongmaitech$PRODUCT$nbd8016s-ula-v2",
      "xiongmaitech$PRODUCT$nbd8016s-ula-v2_firmware",
      "xiongmaitech$PRODUCT$nbd8016t-q-v2",
      "xiongmaitech$PRODUCT$nbd8016t-q-v2_firmware",
      "xiongmaitech$PRODUCT$nbd8025r-ul",
      "xiongmaitech$PRODUCT$nbd8025r-ul_firmware",
      "xiongmaitech$PRODUCT$nbd8032h4-p",
      "xiongmaitech$PRODUCT$nbd8032h4-p_firmware",
      "xiongmaitech$PRODUCT$nbd8032h4-q",
      "xiongmaitech$PRODUCT$nbd8032h4-q_firmware",
      "xiongmaitech$PRODUCT$nbd8032h4-qe",
      "xiongmaitech$PRODUCT$nbd8032h4-qe_firmware",
      "xiongmaitech$PRODUCT$nbd8032h4-ul",
      "xiongmaitech$PRODUCT$nbd8032h4-ul_firmware",
      "xiongmaitech$PRODUCT$nbd8032h8-p",
      "xiongmaitech$PRODUCT$nbd8032h8-p_firmware",
      "xiongmaitech$PRODUCT$nbd8032h8-qe",
      "xiongmaitech$PRODUCT$nbd8032h8-qe_firmware",
      "xiongmaitech$PRODUCT$nbd8032ra-ul-v2",
      "xiongmaitech$PRODUCT$nbd8032ra-ul-v2_firmware",
      "xiongmaitech$PRODUCT$nbd8064h8-p",
      "xiongmaitech$PRODUCT$nbd8064h8-p_firmware",
      "xiongmaitech$PRODUCT$nbd80n16ra-kl",
      "xiongmaitech$PRODUCT$nbd80n16ra-kl\\(ep\\)",
      "xiongmaitech$PRODUCT$nbd80n16ra-kl\\(ep\\)_firmware",
      "xiongmaitech$PRODUCT$nbd80n16ra-kl_firmware",
      "xiongmaitech$PRODUCT$nbd80s08s-kl\\(ep\\)",
      "xiongmaitech$PRODUCT$nbd80s08s-kl\\(ep\\)_firmware",
      "xiongmaitech$PRODUCT$nbd80s10s-kl",
      "xiongmaitech$PRODUCT$nbd80s10s-kl_firmware",
      "xiongmaitech$PRODUCT$nbd80s16s-kl",
      "xiongmaitech$PRODUCT$nbd80s16s-kl\\(ep\\)",
      "xiongmaitech$PRODUCT$nbd80s16s-kl\\(ep\\)_firmware",
      "xiongmaitech$PRODUCT$nbd80s16s-kl_firmware",
      "xiongmaitech$PRODUCT$nbd80x09ra-kl",
      "xiongmaitech$PRODUCT$nbd80x09ra-kl_firmware",
      "xiongmaitech$PRODUCT$nbd80x09s-kl",
      "xiongmaitech$PRODUCT$nbd80x09s-kl_firmware",
      "xiongmaitech$PRODUCT$nbd88x09s-kl",
      "xiongmaitech$PRODUCT$nbd88x09s-kl_firmware",
      "xiongmaitech$PRODUCT$nbd8904r-pl",
      "xiongmaitech$PRODUCT$nbd8904r-pl_firmware",
      "xiongmaitech$PRODUCT$nbd8904r-yl",
      "xiongmaitech$PRODUCT$nbd8904r-yl_firmware",
      "xiongmaitech$PRODUCT$nbd8904t-gsc-xpoe",
      "xiongmaitech$PRODUCT$nbd8904t-gsc-xpoe_firmware",
      "xiongmaitech$PRODUCT$nbd8904t-q",
      "xiongmaitech$PRODUCT$nbd8904t-q_firmware",
      "xiongmaitech$PRODUCT$nbd8908r-pl",
      "xiongmaitech$PRODUCT$nbd8908r-pl_firmware",
      "xiongmaitech$PRODUCT$nbd8908r-yl",
      "xiongmaitech$PRODUCT$nbd8908r-yl_firmware",
      "xiongmaitech$PRODUCT$nbd8908t-pl-xpoe",
      "xiongmaitech$PRODUCT$nbd8908t-pl-xpoe_firmware",
      "xiongmaitech$PRODUCT$nbd8908t-plc-xpoe",
      "xiongmaitech$PRODUCT$nbd8908t-plc-xpoe_firmware",
      "xiongmaitech$PRODUCT$nbd8916f4-q",
      "xiongmaitech$PRODUCT$nbd8916f4-q_firmware",
      "xiongmaitech$PRODUCT$nbd8916f8-q",
      "xiongmaitech$PRODUCT$nbd8916f8-q_firmware"
    ],
    "weaknesses": [
      "CWE-78"
    ]
  },
  "opencve": {
    "changes": [
      {
        "created": "2025-04-24T20:15:00+00:00",
        "data": [
          {
            "details": {
              "added": {
                "ssvc": {
                  "options": {
                    "Automatable": "no",
                    "Exploitation": "none",
                    "Technical Impact": "total"
                  },
                  "version": "2.0.3"
                }
              },
              "removed": {},
              "updated": {}
            },
            "type": "metrics"
          }
        ],
        "id": "df25c302-369f-4513-bed0-efd6dcb84137"
      }
    ],
    "cpes": {
      "data": [
        "cpe:2.3:h:xiongmaitech:mbd6304t:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd6808t-pl:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7004t-p:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7004t-p:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7008t-p:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7008t-p:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7016t-f-v2:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7016t-f-v2:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7024h-p:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7024h-p:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7024t-p:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7024t-p:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7804r-f\\(ep\\):*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7804r-f\\(ep\\):-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7804r-f\\(hdmi\\):*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7804r-f\\(hdmi\\):-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7804r-fw:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7804r-fw:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7804t-pl:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7804t-pl:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7808r-pl\\(ep\\):*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7808r-pl\\(ep\\):-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7808r-pl\\(hdmi\\):*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7808r-pl\\(hdmi\\):-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7808t-pl:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7808t-pl:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7904r-fs:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7904r-fs:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7904t-p:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7904t-p:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7904t-pl-xpoe:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7904t-pl:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7904t-pl:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7904t-plc-xpoe:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7904t-q:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7904t-q:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7908t-q:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd7908t-q:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8004r-pl\\(ep\\):*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8004r-pl\\(ep\\):-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8004r-yl\\(ep\\):-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8004t-q:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8004t-q:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8008r-pl:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8008r-pl:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8008r-pl\\(ep\\):*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8008r-pl\\(ep\\):-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8008r-yl\\(ep\\):-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8008ra-gl:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8008ra-glk:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8008ra-ul\\(ep\\):-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8008ra-ula:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8008ra-ulk:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8008t-q:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8008t-q:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8009s-ula-v2:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8010s-kl-v2:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8016r-ul:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8016r-ul:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8016ra-k\\(ep\\):-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8016ra-ul:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8016ra-ul\\(ep\\):-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8016ra-ula:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8016ra-ulk:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8016s-kl-v2:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8016s-ula-v2:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8016t-q-v2:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8016t-q-v2:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8025r-ul:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8025r-ul:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8032h4-p:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8032h4-p:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8032h4-q:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8032h4-q:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8032h4-qe:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8032h4-qe:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8032h4-ul:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8032h8-p:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8032h8-p:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8032h8-qe:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8032h8-qe:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8032ra-ul-v2:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8064h8-p:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8064h8-p:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd80n16ra-kl:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd80n16ra-kl\\(ep\\):-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd80s08s-kl\\(ep\\):-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd80s10s-kl:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd80s16s-kl:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd80s16s-kl\\(ep\\):-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd80x09ra-kl:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd80x09s-kl:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd88x09s-kl:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8904r-pl:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8904r-pl:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8904r-yl:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8904t-gsc-xpoe:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8904t-q:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8904t-q:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8908r-pl:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8908r-pl:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8908r-yl:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8908r-yl:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8908t-pl-xpoe:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8908t-plc-xpoe:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8916f4-q:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8916f4-q:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8916f8-q:*:*:*:*:*:*:*:*",
        "cpe:2.3:h:xiongmaitech:nbd8916f8-q:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:mbd6304t_firmware:4.02.r11.00000117.10001.131900.00000:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd6808t-pl_firmware:4.02.r11.c7431119.12001.130000.00000:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd7004t-p_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd7008t-p_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd7016t-f-v2_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd7024h-p_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd7024t-p_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd7804r-f\\(ep\\)_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd7804r-f\\(hdmi\\)_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd7804r-fw_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd7804t-pl_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd7808r-pl\\(ep\\)_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd7808r-pl\\(hdmi\\)_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd7808t-pl_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd7904r-fs_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd7904t-p_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd7904t-pl-xpoe_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd7904t-pl_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd7904t-plc-xpoe_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd7904t-q_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd7908t-q_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8004r-pl\\(ep\\)_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8004r-yl\\(ep\\)_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8004t-q_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8008r-pl\\(ep\\)_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8008r-pl_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8008r-yl\\(ep\\)_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8008ra-gl_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8008ra-glk_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8008ra-ul\\(ep\\)_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8008ra-ula_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8008ra-ulk_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8008t-q_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8009s-ula-v2_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8010s-kl-v2_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8016r-ul_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8016ra-k\\(ep\\)_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8016ra-ul\\(ep\\)_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8016ra-ul_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8016ra-ula_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8016ra-ulk_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8016s-kl-v2_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8016s-ula-v2_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8016t-q-v2_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8025r-ul_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8032h4-p_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8032h4-q_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8032h4-qe_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8032h4-ul_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8032h8-p_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8032h8-qe_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8032ra-ul-v2_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8064h8-p_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd80n16ra-kl\\(ep\\)_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd80n16ra-kl_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd80s08s-kl\\(ep\\)_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd80s10s-kl_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd80s16s-kl\\(ep\\)_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd80s16s-kl_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd80x09ra-kl_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd80x09s-kl_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd88x09s-kl_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8904r-pl_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8904r-yl_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8904t-gsc-xpoe_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8904t-q_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8908r-pl_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8908r-yl_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8908t-pl-xpoe_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8908t-plc-xpoe_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8916f4-q_firmware:-:*:*:*:*:*:*:*",
        "cpe:2.3:o:xiongmaitech:nbd8916f8-q_firmware:-:*:*:*:*:*:*:*"
      ],
      "providers": [
        "nvd"
      ]
    },
    "created": {
      "data": "2022-12-01T00:00:00+00:00",
      "provider": "mitre"
    },
    "description": {
      "data": "Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated attacker, possibly using the default admin:tlJwpbo6 credentials, can connect to port 34567 and execute arbitrary operating system commands via a crafted JSON file during an upgrade request. Since at least 2021, Xiongmai has applied patches to prevent attackers from using this mechanism to execute telnetd.",
      "provider": "mitre"
    },
    "metrics": {
      "cvssV2_0": {
        "data": {},
        "provider": null
      },
      "cvssV3_0": {
        "data": {},
        "provider": null
      },
      "cvssV3_1": {
        "data": {
          "score": 8.8,
          "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        },
        "provider": "vulnrichment"
      },
      "cvssV4_0": {
        "data": {},
        "provider": null
      },
      "epss": {
        "data": {
          "score": 0.02431
        },
        "provider": "first"
      },
      "kev": {
        "data": {},
        "provider": null
      },
      "ssvc": {
        "data": {
          "options": {
            "Automatable": "no",
            "Exploitation": "none",
            "Technical Impact": "total"
          },
          "version": "2.0.3"
        },
        "provider": "vulnrichment"
      },
      "threat_severity": {
        "data": null,
        "provider": null
      }
    },
    "references": {
      "data": [
        "https://vulncheck.com/blog/xiongmai-iot-exploitation"
      ],
      "providers": [
        "mitre",
        "nvd"
      ]
    },
    "title": {
      "data": null,
      "provider": null
    },
    "updated": {
      "data": "2025-04-24T20:15:29.603000+00:00",
      "provider": "nvd"
    },
    "vendors": {
      "data": [
        "xiongmaitech",
        "xiongmaitech$PRODUCT$mbd6304t",
        "xiongmaitech$PRODUCT$mbd6304t_firmware",
        "xiongmaitech$PRODUCT$nbd6808t-pl",
        "xiongmaitech$PRODUCT$nbd6808t-pl_firmware",
        "xiongmaitech$PRODUCT$nbd7004t-p",
        "xiongmaitech$PRODUCT$nbd7004t-p_firmware",
        "xiongmaitech$PRODUCT$nbd7008t-p",
        "xiongmaitech$PRODUCT$nbd7008t-p_firmware",
        "xiongmaitech$PRODUCT$nbd7016t-f-v2",
        "xiongmaitech$PRODUCT$nbd7016t-f-v2_firmware",
        "xiongmaitech$PRODUCT$nbd7024h-p",
        "xiongmaitech$PRODUCT$nbd7024h-p_firmware",
        "xiongmaitech$PRODUCT$nbd7024t-p",
        "xiongmaitech$PRODUCT$nbd7024t-p_firmware",
        "xiongmaitech$PRODUCT$nbd7804r-f\\(ep\\)",
        "xiongmaitech$PRODUCT$nbd7804r-f\\(ep\\)_firmware",
        "xiongmaitech$PRODUCT$nbd7804r-f\\(hdmi\\)",
        "xiongmaitech$PRODUCT$nbd7804r-f\\(hdmi\\)_firmware",
        "xiongmaitech$PRODUCT$nbd7804r-fw",
        "xiongmaitech$PRODUCT$nbd7804r-fw_firmware",
        "xiongmaitech$PRODUCT$nbd7804t-pl",
        "xiongmaitech$PRODUCT$nbd7804t-pl_firmware",
        "xiongmaitech$PRODUCT$nbd7808r-pl\\(ep\\)",
        "xiongmaitech$PRODUCT$nbd7808r-pl\\(ep\\)_firmware",
        "xiongmaitech$PRODUCT$nbd7808r-pl\\(hdmi\\)",
        "xiongmaitech$PRODUCT$nbd7808r-pl\\(hdmi\\)_firmware",
        "xiongmaitech$PRODUCT$nbd7808t-pl",
        "xiongmaitech$PRODUCT$nbd7808t-pl_firmware",
        "xiongmaitech$PRODUCT$nbd7904r-fs",
        "xiongmaitech$PRODUCT$nbd7904r-fs_firmware",
        "xiongmaitech$PRODUCT$nbd7904t-p",
        "xiongmaitech$PRODUCT$nbd7904t-p_firmware",
        "xiongmaitech$PRODUCT$nbd7904t-pl",
        "xiongmaitech$PRODUCT$nbd7904t-pl-xpoe",
        "xiongmaitech$PRODUCT$nbd7904t-pl-xpoe_firmware",
        "xiongmaitech$PRODUCT$nbd7904t-pl_firmware",
        "xiongmaitech$PRODUCT$nbd7904t-plc-xpoe",
        "xiongmaitech$PRODUCT$nbd7904t-plc-xpoe_firmware",
        "xiongmaitech$PRODUCT$nbd7904t-q",
        "xiongmaitech$PRODUCT$nbd7904t-q_firmware",
        "xiongmaitech$PRODUCT$nbd7908t-q",
        "xiongmaitech$PRODUCT$nbd7908t-q_firmware",
        "xiongmaitech$PRODUCT$nbd8004r-pl\\(ep\\)",
        "xiongmaitech$PRODUCT$nbd8004r-pl\\(ep\\)_firmware",
        "xiongmaitech$PRODUCT$nbd8004r-yl\\(ep\\)",
        "xiongmaitech$PRODUCT$nbd8004r-yl\\(ep\\)_firmware",
        "xiongmaitech$PRODUCT$nbd8004t-q",
        "xiongmaitech$PRODUCT$nbd8004t-q_firmware",
        "xiongmaitech$PRODUCT$nbd8008r-pl",
        "xiongmaitech$PRODUCT$nbd8008r-pl\\(ep\\)",
        "xiongmaitech$PRODUCT$nbd8008r-pl\\(ep\\)_firmware",
        "xiongmaitech$PRODUCT$nbd8008r-pl_firmware",
        "xiongmaitech$PRODUCT$nbd8008r-yl\\(ep\\)",
        "xiongmaitech$PRODUCT$nbd8008r-yl\\(ep\\)_firmware",
        "xiongmaitech$PRODUCT$nbd8008ra-gl",
        "xiongmaitech$PRODUCT$nbd8008ra-gl_firmware",
        "xiongmaitech$PRODUCT$nbd8008ra-glk",
        "xiongmaitech$PRODUCT$nbd8008ra-glk_firmware",
        "xiongmaitech$PRODUCT$nbd8008ra-ul\\(ep\\)",
        "xiongmaitech$PRODUCT$nbd8008ra-ul\\(ep\\)_firmware",
        "xiongmaitech$PRODUCT$nbd8008ra-ula",
        "xiongmaitech$PRODUCT$nbd8008ra-ula_firmware",
        "xiongmaitech$PRODUCT$nbd8008ra-ulk",
        "xiongmaitech$PRODUCT$nbd8008ra-ulk_firmware",
        "xiongmaitech$PRODUCT$nbd8008t-q",
        "xiongmaitech$PRODUCT$nbd8008t-q_firmware",
        "xiongmaitech$PRODUCT$nbd8009s-ula-v2",
        "xiongmaitech$PRODUCT$nbd8009s-ula-v2_firmware",
        "xiongmaitech$PRODUCT$nbd8010s-kl-v2",
        "xiongmaitech$PRODUCT$nbd8010s-kl-v2_firmware",
        "xiongmaitech$PRODUCT$nbd8016r-ul",
        "xiongmaitech$PRODUCT$nbd8016r-ul_firmware",
        "xiongmaitech$PRODUCT$nbd8016ra-k\\(ep\\)",
        "xiongmaitech$PRODUCT$nbd8016ra-k\\(ep\\)_firmware",
        "xiongmaitech$PRODUCT$nbd8016ra-ul",
        "xiongmaitech$PRODUCT$nbd8016ra-ul\\(ep\\)",
        "xiongmaitech$PRODUCT$nbd8016ra-ul\\(ep\\)_firmware",
        "xiongmaitech$PRODUCT$nbd8016ra-ul_firmware",
        "xiongmaitech$PRODUCT$nbd8016ra-ula",
        "xiongmaitech$PRODUCT$nbd8016ra-ula_firmware",
        "xiongmaitech$PRODUCT$nbd8016ra-ulk",
        "xiongmaitech$PRODUCT$nbd8016ra-ulk_firmware",
        "xiongmaitech$PRODUCT$nbd8016s-kl-v2",
        "xiongmaitech$PRODUCT$nbd8016s-kl-v2_firmware",
        "xiongmaitech$PRODUCT$nbd8016s-ula-v2",
        "xiongmaitech$PRODUCT$nbd8016s-ula-v2_firmware",
        "xiongmaitech$PRODUCT$nbd8016t-q-v2",
        "xiongmaitech$PRODUCT$nbd8016t-q-v2_firmware",
        "xiongmaitech$PRODUCT$nbd8025r-ul",
        "xiongmaitech$PRODUCT$nbd8025r-ul_firmware",
        "xiongmaitech$PRODUCT$nbd8032h4-p",
        "xiongmaitech$PRODUCT$nbd8032h4-p_firmware",
        "xiongmaitech$PRODUCT$nbd8032h4-q",
        "xiongmaitech$PRODUCT$nbd8032h4-q_firmware",
        "xiongmaitech$PRODUCT$nbd8032h4-qe",
        "xiongmaitech$PRODUCT$nbd8032h4-qe_firmware",
        "xiongmaitech$PRODUCT$nbd8032h4-ul",
        "xiongmaitech$PRODUCT$nbd8032h4-ul_firmware",
        "xiongmaitech$PRODUCT$nbd8032h8-p",
        "xiongmaitech$PRODUCT$nbd8032h8-p_firmware",
        "xiongmaitech$PRODUCT$nbd8032h8-qe",
        "xiongmaitech$PRODUCT$nbd8032h8-qe_firmware",
        "xiongmaitech$PRODUCT$nbd8032ra-ul-v2",
        "xiongmaitech$PRODUCT$nbd8032ra-ul-v2_firmware",
        "xiongmaitech$PRODUCT$nbd8064h8-p",
        "xiongmaitech$PRODUCT$nbd8064h8-p_firmware",
        "xiongmaitech$PRODUCT$nbd80n16ra-kl",
        "xiongmaitech$PRODUCT$nbd80n16ra-kl\\(ep\\)",
        "xiongmaitech$PRODUCT$nbd80n16ra-kl\\(ep\\)_firmware",
        "xiongmaitech$PRODUCT$nbd80n16ra-kl_firmware",
        "xiongmaitech$PRODUCT$nbd80s08s-kl\\(ep\\)",
        "xiongmaitech$PRODUCT$nbd80s08s-kl\\(ep\\)_firmware",
        "xiongmaitech$PRODUCT$nbd80s10s-kl",
        "xiongmaitech$PRODUCT$nbd80s10s-kl_firmware",
        "xiongmaitech$PRODUCT$nbd80s16s-kl",
        "xiongmaitech$PRODUCT$nbd80s16s-kl\\(ep\\)",
        "xiongmaitech$PRODUCT$nbd80s16s-kl\\(ep\\)_firmware",
        "xiongmaitech$PRODUCT$nbd80s16s-kl_firmware",
        "xiongmaitech$PRODUCT$nbd80x09ra-kl",
        "xiongmaitech$PRODUCT$nbd80x09ra-kl_firmware",
        "xiongmaitech$PRODUCT$nbd80x09s-kl",
        "xiongmaitech$PRODUCT$nbd80x09s-kl_firmware",
        "xiongmaitech$PRODUCT$nbd88x09s-kl",
        "xiongmaitech$PRODUCT$nbd88x09s-kl_firmware",
        "xiongmaitech$PRODUCT$nbd8904r-pl",
        "xiongmaitech$PRODUCT$nbd8904r-pl_firmware",
        "xiongmaitech$PRODUCT$nbd8904r-yl",
        "xiongmaitech$PRODUCT$nbd8904r-yl_firmware",
        "xiongmaitech$PRODUCT$nbd8904t-gsc-xpoe",
        "xiongmaitech$PRODUCT$nbd8904t-gsc-xpoe_firmware",
        "xiongmaitech$PRODUCT$nbd8904t-q",
        "xiongmaitech$PRODUCT$nbd8904t-q_firmware",
        "xiongmaitech$PRODUCT$nbd8908r-pl",
        "xiongmaitech$PRODUCT$nbd8908r-pl_firmware",
        "xiongmaitech$PRODUCT$nbd8908r-yl",
        "xiongmaitech$PRODUCT$nbd8908r-yl_firmware",
        "xiongmaitech$PRODUCT$nbd8908t-pl-xpoe",
        "xiongmaitech$PRODUCT$nbd8908t-pl-xpoe_firmware",
        "xiongmaitech$PRODUCT$nbd8908t-plc-xpoe",
        "xiongmaitech$PRODUCT$nbd8908t-plc-xpoe_firmware",
        "xiongmaitech$PRODUCT$nbd8916f4-q",
        "xiongmaitech$PRODUCT$nbd8916f4-q_firmware",
        "xiongmaitech$PRODUCT$nbd8916f8-q",
        "xiongmaitech$PRODUCT$nbd8916f8-q_firmware"
      ],
      "providers": [
        "nvd"
      ]
    },
    "weaknesses": {
      "data": [
        "CWE-78"
      ],
      "providers": [
        "nvd",
        "vulnrichment"
      ]
    }
  },
  "vulnrichment": {
    "cpes": [],
    "created": "2022-12-01T00:00:00+00:00",
    "description": "Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated attacker, possibly using the default admin:tlJwpbo6 credentials, can connect to port 34567 and execute arbitrary operating system commands via a crafted JSON file during an upgrade request. Since at least 2021, Xiongmai has applied patches to prevent attackers from using this mechanism to execute telnetd.",
    "metrics": {
      "cvssV2_0": {},
      "cvssV3_0": {},
      "cvssV3_1": {
        "score": 8.8,
        "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
      },
      "cvssV4_0": {},
      "kev": {},
      "ssvc": {
        "options": {
          "Automatable": "no",
          "Exploitation": "none",
          "Technical Impact": "total"
        },
        "version": "2.0.3"
      }
    },
    "references": [],
    "title": null,
    "updated": "2025-04-24T20:08:22.764000+00:00",
    "vendors": [],
    "vulnrichment_repo_path": "2022/45xxx/CVE-2022-45045.json",
    "weaknesses": [
      "CWE-78"
    ]
  }
}