| शीर्षक | Seetong (Shenzhen Topsee Technology) iDVR/NVR platform (ts81xxd3x); shipped in Fullward T8108/T8108P/T8116/T8232 and Topsee-branded NVRs v4.6.1.4-build202604241011 Missing Authentication for Critical Function |
|---|
| विवरण | An unauthenticated remote command execution vulnerability exists in the undocumented RLog/TLog debug service included in the Seetong (Shenzhen Topsee Technology) iDVR/NVR firmware platform (ts81xxd3x family).
The service listens on TCP port 3000 and does not require authentication. A remote attacker can execute arbitrary operating system commands with root privileges, read arbitrary files, and enable additional remote access services.
The vulnerability was confirmed through firmware analysis and execution of the vendor-provided binaries under QEMU ARM emulation. The affected debug service was identified in multiple independently branded firmware images, indicating the issue exists in the shared firmware platform. |
|---|
| उपयोगकर्ता | axjp (UID 100399) |
|---|
| सबमिशन | 05/08/2026 07:17 PM (2 महीनों पहले) |
|---|
| संयम | 27/09/2026 09:30 AM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 410835 [Seetong T8108/T8108P/T8116/T8232 4.6.1.4-build202604241011 Debug Service कमजोर प्रमाणीकरण] |
|---|
| अंक | 17 |
|---|