{"cvss":0.0,"datePublished":"2020-03-20T00:00:00Z","dateUpdated":"2020-03-20T00:00:00Z","description":"A command injection vulnerability exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_20200207 via the Server field in the NTPUpdate configuration. The web service at /z/zbin/dvr_box fails to properly sanitize input, allowing remote attackers to inject and execute arbitrary commands as root by supplying specially crafted XML data to the DVRPOST interface.","dueDate":"","id":"CVE-2025-34132","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"Digital Video Recorder (DVR)","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"TVT dvr Improper Input Validation","vendor":"LILIN"}