9.8
CVSSv3

CVE-2020-3924

Published: 27/02/2020 Updated: 21/07/2021
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET do not properly verify patch files. Attackers can inject a specific command into a patch file and gain access to the system.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

tonnet tat-77104g1_firmware

tonnet tat-70432n_firmware

tonnet tat-71416g1_firmware

tonnet tat-71832g1_firmware

tonnet tat-76104g3_firmware

tonnet tat-76108g3_firmware

tonnet tat-76116g3_firmware

tonnet tat-76132g3_firmware