{
  "cvss": 0.0,
  "datePublished": "2020-03-20T00:00:00Z",
  "dateUpdated": "2020-03-20T00:00:00Z",
  "description": "A command injection vulnerability exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_20200207 via the Server field in the NTPUpdate configuration. The web service at /z/zbin/dvr_box fails to properly sanitize input, allowing remote attackers to inject and execute arbitrary commands as root by supplying specially crafted XML data to the DVRPOST interface.",
  "dueDate": "",
  "id": "CVE-2025-34132",
  "kev_catalogs": [
    "vulncheck"
  ],
  "knownRansomwareCampaignUse": "Unknown",
  "product": "Digital Video Recorder (DVR)",
  "requiredAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",
  "severity": "HIGH",
  "source": "vulncheck_kev",
  "title": "TVT dvr Improper Input Validation",
  "vendor": "LILIN"
}