CVE-2022-45045
Summary
| CVE | CVE-2022-45045 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-12-01 05:15:00 UTC |
| Updated | 2022-12-06 15:50:00 UTC |
| Description | Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated attacker, possibly using the default admin:tlJwpbo6 credentials, can connect to port 34567 and execute arbitrary operating system commands via a crafted JSON file during an upgrade request. Since at least 2021, Xiongmai has applied patches to prevent attackers from using this mechanism to execute telnetd. |
Risk And Classification
Problem Types: CWE-78
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Xiongmaitech | Mbd6304t | - | All | All | All |
| Hardware | Xiongmaitech | Mbd6304t | - | All | All | All |
| Operating System | Xiongmaitech | Mbd6304t Firmware | 4.02.r11.00000117.10001.131900.00000 | All | All | All |
| Hardware | Xiongmaitech | Nbd6808t-pl | - | All | All | All |
| Hardware | Xiongmaitech | Nbd6808t-pl | - | All | All | All |
| Operating System | Xiongmaitech | Nbd6808t-pl Firmware | 4.02.r11.c7431119.12001.130000.00000 | All | All | All |
| Hardware | Xiongmaitech | Nbd7004t-p | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7004t-p | All | All | All | All |
| Operating System | Xiongmaitech | Nbd7004t-p Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7008t-p | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7008t-p | All | All | All | All |
| Operating System | Xiongmaitech | Nbd7008t-p Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7016t-f-v2 | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7016t-f-v2 | All | All | All | All |
| Operating System | Xiongmaitech | Nbd7016t-f-v2 Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7024h-p | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7024h-p | All | All | All | All |
| Operating System | Xiongmaitech | Nbd7024h-p Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7024t-p | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7024t-p | All | All | All | All |
| Operating System | Xiongmaitech | Nbd7024t-p Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7804r-fw | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7804r-fw | All | All | All | All |
| Operating System | Xiongmaitech | Nbd7804r-fw Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7804r-fep | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7804r-fep | All | All | All | All |
| Operating System | Xiongmaitech | Nbd7804r-fep Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7804r-fhdmi | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7804r-fhdmi | All | All | All | All |
| Operating System | Xiongmaitech | Nbd7804r-fhdmi Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7804t-pl | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7804t-pl | All | All | All | All |
| Operating System | Xiongmaitech | Nbd7804t-pl Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7808r-plep | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7808r-plep | All | All | All | All |
| Operating System | Xiongmaitech | Nbd7808r-plep Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7808r-plhdmi | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7808r-plhdmi | All | All | All | All |
| Operating System | Xiongmaitech | Nbd7808r-plhdmi Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7808t-pl | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7808t-pl | All | All | All | All |
| Operating System | Xiongmaitech | Nbd7808t-pl Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7904r-fs | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7904r-fs | All | All | All | All |
| Operating System | Xiongmaitech | Nbd7904r-fs Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7904t-p | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7904t-p | All | All | All | All |
| Hardware | Xiongmaitech | Nbd7904t-pl | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7904t-pl | All | All | All | All |
| Hardware | Xiongmaitech | Nbd7904t-pl-xpoe | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7904t-pl-xpoe | - | All | All | All |
| Operating System | Xiongmaitech | Nbd7904t-pl-xpoe Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7904t-plc-xpoe | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7904t-plc-xpoe | - | All | All | All |
| Operating System | Xiongmaitech | Nbd7904t-plc-xpoe Firmware | - | All | All | All |
| Operating System | Xiongmaitech | Nbd7904t-pl Firmware | - | All | All | All |
| Operating System | Xiongmaitech | Nbd7904t-p Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7904t-q | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7904t-q | All | All | All | All |
| Operating System | Xiongmaitech | Nbd7904t-q Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7908t-q | - | All | All | All |
| Hardware | Xiongmaitech | Nbd7908t-q | All | All | All | All |
| Operating System | Xiongmaitech | Nbd7908t-q Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8004r-plep | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8004r-plep | All | All | All | All |
| Operating System | Xiongmaitech | Nbd8004r-plep Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8004r-ylep | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8004r-ylep | - | All | All | All |
| Operating System | Xiongmaitech | Nbd8004r-ylep Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8004t-q | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8004t-q | All | All | All | All |
| Operating System | Xiongmaitech | Nbd8004t-q Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8008r-pl | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8008r-pl | All | All | All | All |
| Hardware | Xiongmaitech | Nbd8008r-plep | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8008r-plep | All | All | All | All |
| Operating System | Xiongmaitech | Nbd8008r-plep Firmware | - | All | All | All |
| Operating System | Xiongmaitech | Nbd8008r-pl Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8008r-ylep | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8008r-ylep | - | All | All | All |
| Operating System | Xiongmaitech | Nbd8008r-ylep Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8008ra-gl | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8008ra-gl | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8008ra-glk | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8008ra-glk | - | All | All | All |
| Operating System | Xiongmaitech | Nbd8008ra-glk Firmware | - | All | All | All |
| Operating System | Xiongmaitech | Nbd8008ra-gl Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8008ra-ula | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8008ra-ula | - | All | All | All |
| Operating System | Xiongmaitech | Nbd8008ra-ula Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8008ra-ulk | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8008ra-ulk | - | All | All | All |
| Operating System | Xiongmaitech | Nbd8008ra-ulk Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8008ra-ulep | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8008ra-ulep | - | All | All | All |
| Operating System | Xiongmaitech | Nbd8008ra-ulep Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8008t-q | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8008t-q | All | All | All | All |
| Operating System | Xiongmaitech | Nbd8008t-q Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8009s-ula-v2 | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8009s-ula-v2 | - | All | All | All |
| Operating System | Xiongmaitech | Nbd8009s-ula-v2 Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8010s-kl-v2 | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8010s-kl-v2 | - | All | All | All |
| Operating System | Xiongmaitech | Nbd8010s-kl-v2 Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8016r-ul | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8016r-ul | All | All | All | All |
| Operating System | Xiongmaitech | Nbd8016r-ul Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8016ra-kep | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8016ra-kep | - | All | All | All |
| Operating System | Xiongmaitech | Nbd8016ra-kep Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8016ra-ul | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8016ra-ul | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8016ra-ula | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8016ra-ula | - | All | All | All |
| Operating System | Xiongmaitech | Nbd8016ra-ula Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8016ra-ulk | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8016ra-ulk | - | All | All | All |
| Operating System | Xiongmaitech | Nbd8016ra-ulk Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8016ra-ulep | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8016ra-ulep | - | All | All | All |
| Operating System | Xiongmaitech | Nbd8016ra-ulep Firmware | - | All | All | All |
| Operating System | Xiongmaitech | Nbd8016ra-ul Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8016s-kl-v2 | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8016s-kl-v2 | - | All | All | All |
| Operating System | Xiongmaitech | Nbd8016s-kl-v2 Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8016s-ula-v2 | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8016s-ula-v2 | - | All | All | All |
| Operating System | Xiongmaitech | Nbd8016s-ula-v2 Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8016t-q-v2 | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8016t-q-v2 | All | All | All | All |
| Operating System | Xiongmaitech | Nbd8016t-q-v2 Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8025r-ul | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8025r-ul | All | All | All | All |
| Operating System | Xiongmaitech | Nbd8025r-ul Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8032h4-p | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8032h4-p | All | All | All | All |
| Operating System | Xiongmaitech | Nbd8032h4-p Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8032h4-q | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8032h4-q | All | All | All | All |
| Hardware | Xiongmaitech | Nbd8032h4-qe | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8032h4-qe | All | All | All | All |
| Operating System | Xiongmaitech | Nbd8032h4-qe Firmware | - | All | All | All |
| Operating System | Xiongmaitech | Nbd8032h4-q Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8032h4-ul | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8032h4-ul | - | All | All | All |
| Operating System | Xiongmaitech | Nbd8032h4-ul Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8032h8-p | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8032h8-p | All | All | All | All |
| Operating System | Xiongmaitech | Nbd8032h8-p Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8032h8-qe | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8032h8-qe | All | All | All | All |
| Operating System | Xiongmaitech | Nbd8032h8-qe Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8032ra-ul-v2 | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8032ra-ul-v2 | - | All | All | All |
| Operating System | Xiongmaitech | Nbd8032ra-ul-v2 Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8064h8-p | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8064h8-p | All | All | All | All |
| Operating System | Xiongmaitech | Nbd8064h8-p Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd80n16ra-kl | - | All | All | All |
| Hardware | Xiongmaitech | Nbd80n16ra-kl | - | All | All | All |
| Hardware | Xiongmaitech | Nbd80n16ra-klep | - | All | All | All |
| Hardware | Xiongmaitech | Nbd80n16ra-klep | - | All | All | All |
| Operating System | Xiongmaitech | Nbd80n16ra-klep Firmware | - | All | All | All |
| Operating System | Xiongmaitech | Nbd80n16ra-kl Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd80s08s-klep | - | All | All | All |
| Hardware | Xiongmaitech | Nbd80s08s-klep | - | All | All | All |
| Operating System | Xiongmaitech | Nbd80s08s-klep Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd80s10s-kl | - | All | All | All |
| Hardware | Xiongmaitech | Nbd80s10s-kl | - | All | All | All |
| Operating System | Xiongmaitech | Nbd80s10s-kl Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd80s16s-kl | - | All | All | All |
| Hardware | Xiongmaitech | Nbd80s16s-kl | - | All | All | All |
| Hardware | Xiongmaitech | Nbd80s16s-klep | - | All | All | All |
| Hardware | Xiongmaitech | Nbd80s16s-klep | - | All | All | All |
| Operating System | Xiongmaitech | Nbd80s16s-klep Firmware | - | All | All | All |
| Operating System | Xiongmaitech | Nbd80s16s-kl Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd80x09ra-kl | - | All | All | All |
| Hardware | Xiongmaitech | Nbd80x09ra-kl | - | All | All | All |
| Operating System | Xiongmaitech | Nbd80x09ra-kl Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd80x09s-kl | - | All | All | All |
| Hardware | Xiongmaitech | Nbd80x09s-kl | - | All | All | All |
| Operating System | Xiongmaitech | Nbd80x09s-kl Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd88x09s-kl | - | All | All | All |
| Hardware | Xiongmaitech | Nbd88x09s-kl | - | All | All | All |
| Operating System | Xiongmaitech | Nbd88x09s-kl Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8904r-pl | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8904r-pl | All | All | All | All |
| Operating System | Xiongmaitech | Nbd8904r-pl Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8904r-yl | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8904r-yl | - | All | All | All |
| Operating System | Xiongmaitech | Nbd8904r-yl Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8904t-gsc-xpoe | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8904t-gsc-xpoe | - | All | All | All |
| Operating System | Xiongmaitech | Nbd8904t-gsc-xpoe Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8904t-q | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8904t-q | All | All | All | All |
| Operating System | Xiongmaitech | Nbd8904t-q Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8908r-pl | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8908r-pl | All | All | All | All |
| Operating System | Xiongmaitech | Nbd8908r-pl Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8908r-yl | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8908r-yl | All | All | All | All |
| Operating System | Xiongmaitech | Nbd8908r-yl Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8908t-pl-xpoe | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8908t-pl-xpoe | - | All | All | All |
| Operating System | Xiongmaitech | Nbd8908t-pl-xpoe Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8908t-plc-xpoe | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8908t-plc-xpoe | - | All | All | All |
| Operating System | Xiongmaitech | Nbd8908t-plc-xpoe Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8916f4-q | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8916f4-q | All | All | All | All |
| Operating System | Xiongmaitech | Nbd8916f4-q Firmware | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8916f8-q | - | All | All | All |
| Hardware | Xiongmaitech | Nbd8916f8-q | All | All | All | All |
| Operating System | Xiongmaitech | Nbd8916f8-q Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Xiongmai IoT Exploitation - Blog - VulnCheck | MISC | vulncheck.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.