GRI

ICS Advisory: Hitron Systems Security Camera DVR

News Cybersecurity English Guidance
Date: 30th Jan, 2024 Source: Cybersecurity and Infrastructure Security Agency Country: USA Original Source

Brief

Summary:

A vulnerability has been identified in Hitron Systems' DVR products, specifically affecting versions 1.03 through 4.02 of the HVR-4781, HVR-8781, HVR-16781, LGUVR-4H, LGUVR-8H, and LGUVR-16H models. The vulnerability is an improper input validation issue (CWE-20) that can cause a denial-of-service condition when using default admin credentials. CVSS v3.1 base scores of 7.4 have been assigned to the vulnerabilities, with the vector string being (AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H). The recommended mitigation is to update the DVR products to the latest versions (4.03) and implement defensive measures such as minimizing network exposure, using firewalls, and securing remote access.

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available/known public exploitation Vendor: Hitron Systems Equipment: DVR Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to affect the availability of the product through exploitation of an improper input validation vulnerability and

This content is restricted.

Highlights content goes here...

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available/known public exploitation Vendor: Hitron Systems Equipment: DVR Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to affect the availability of the product through exploitation of an improper input validation vulnerability and

This content is restricted.

Cybersecurity and Infrastructure Security Agency

Quick Insight
RADA.AI
RADA.AI
Hello! I'm RADA.AI - Regulatory Analysis and Decision Assistance. Your Intelligent guide for compliance and decision-making. How can i assist you today?
Suggested
Related Documents
Siemens Industrial Edge Devices
Date: 10th Apr, 2025 Source: Cybersecurity and Infrastructure Security Agency Country: USA
News Cybersecurity Guidance
Siemens Insights Hub Private Cloud
Date: 10th Apr, 2025 Source: Cybersecurity and Infrastructure Security Agency Country: USA
News Cybersecurity Guidance
handelsfusion.com: BaFin warns of website and points to suspected identity fraud
Date: 10th Apr, 2025 Source: Federal Financial Supervisory Authority (BaFin) Country: Germany
News Corporate Finance & M&A Guidance

Form successfully submitted. One of our GRI rep will contact you shortly

Thanking You!

Click here

Enter your Email

Enter your registered username/email id.

Enter your Email

Enter your email id below to signup.
Individual Plan
  • Designed for Growing Compliance Teams
$125 / month OR $1250 / year
Features
  • • Coverage for 20 jurisdictions
  • • Monitoring from 500+ regulatory authorities
  • • AI compliance summaries
  • • RaDa.ai : Single-Role
Best for: Researchers, Legal professionals, Academics
Subscribe Now
Enterprise Plan
  • Perfect for Global Enterprises
Contact for Pricing
Features
  • • Custom jurisdictional coverage
  • • Custom monitoring of regulatory authorities
  • • RaDa.ai : Customizable multi-role
  • • Custom reporting and dashboard capabilities
  • • API access for seamless integration
Best for: Law Firms, Corporations, Government Bodies
Contact Sales