← Database

CVE-2021-41506

CRITICAL CVSS: 9.8 Published: 2022-06-30 Modified: 2026-06-17

Description

Xiaongmai AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, HI3518_50H10L_S39 V4.02.R11.7601.Nat.Onvif.20170420, V4.02.R11.Nat.Onvif.20160422, V4.02.R11.7601.Nat.Onvif.20170424, V4.02.R11.Nat.Onvif.20170327, V4.02.R11.Nat.Onvif.20161205, V4.02.R11.Nat.20170301, V4.02.R12.Nat.OnvifS.20170727 is affected by a backdoor in the macGuarder and dvrHelper binaries of DVR/NVR/IP camera firmware due to static root account credentials in the system.

Affected Platforms

Xiongmaitech Ahb7804R-LmsXiongmaitech Ahb7808T-Ms-V2 FirmwareXiongmaitech Ahb7804R-Mh-V2Xiongmaitech Ahb7808R-MsXiongmaitech Hi3518E 50H10L S39 FirmwareXiongmaitech Ahb7808R-Ms-V2 FirmwareXiongmaitech Ahb7804R-Lms FirmwareXiongmaitech Ahb7804R-Mh-V2 FirmwareXiongmaitech Ahb7804R-Els FirmwareXiongmaitech Ahb7808R-Ms Firmware

Weakness Type

CWE-287

References