← Database

CVE-2022-35733

CRITICAL CVSS: 9.8 Published: 2022-08-23 Modified: 2026-06-17

Description

Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders (UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier) allows a remote unauthenticated attacker to execute an arbitrary OS command by sending a specially crafted request to the affected device web interface.

Affected Platforms

Unimo Udr-Ja1008 FirmwareUnimo Udr-Ja1016 FirmwareUnimo Udr-Ja1008Unimo Udr-Ja1016Unimo Udr-Ja1004Unimo Udr-Ja1004 Firmware

Weakness Type

CWE-306

References