Search/CVE-2022-45045
● CVE — High

CVE-2022-45045

VendorxiongmaitechProductmbd6304t, nbd6808t-pl, nbd7004t-p, nbd7008t-p, nbd7016t-f-v2, nbd7024h-p, nbd7024t-p, nbd7804r-f(ep), nbd7804r-f(hdmi), nbd7804r-fw, nbd7804t-pl, nbd7808r-pl(ep), nbd7808r-pl(hdmi), nbd7808t-pl, nbd7904r-fs, nbd7904t-p, nbd7904t-pl, nbd7904t-pl-xpoe, nbd7904t-plc-xpoe, nbd7904t-q, nbd7908t-q, nbd8004r-pl(ep), nbd8004r-yl(ep), nbd8004t-q, nbd8008r-plDiscoveredDec 1, 2022UpdatedApr 24, 2025

Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated attacker, possibly using the default admin:tlJwpbo6 credentials, can connect to port 34567 and execute arbitrary operating system commands via a crafted JSON file during an upgrade request. Since at least 2021, Xiongmai has applied patches to prevent attackers from using this mechanism to execute telnetd.

View graph Watch Export
CVSS v3.1
8.8 HIGH
EPSS
2.38%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 26, 2026
▲ 1.15pp
1.24% → 2.38% over 4 tracked changes
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Connections
26 relationships
Timeline
disclosure → media coverage
Dec 1, 2022
Disclosure — published as a CVE record. · last revised by NVD Apr 24, 2025