All the vulnerabilites related to TB-eye Ltd. - HRX-821/TE
cve-2025-41418
Vulnerability from cvelistv5
Published
2025-06-27 05:24
Modified
2025-06-27 05:24
Severity ?
5.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
6.9 (Medium) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
6.9 (Medium) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS score ?
Summary
Buffer Overflow vulnerability exists in multiple versions of TB-eye network recorders and AHD recorders. The CGI process may be terminated abnormally by processing a specially crafted request.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "XRN-410SN/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver2.47b_220119153805 and earlier"
}
]
},
{
"product": "XRN-810SN/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver2.47b_220119153805 and earlier"
}
]
},
{
"product": "XRN-1610SN/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver2.47b_210516234524 and earlier"
}
]
},
{
"product": "PRN-4011N/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver2.51p_231208081715 and earlier"
}
]
},
{
"product": "HRX-421FN/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver3.05.62 and earlier"
}
]
},
{
"product": "HRX-821/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver3.05.62 and earlier"
}
]
},
{
"product": "HRX-1621/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver3.05.62 and earlier"
}
]
},
{
"product": "HRX-435FN/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver5.31.72 and earlier"
}
]
},
{
"product": "HRX-835/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver5.31.72 and earlier"
}
]
},
{
"product": "HRX-1635/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver5.31.72 and earlier"
}
]
},
{
"product": "XRN-425SFN/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver5.31.32 and earlier"
}
]
},
{
"product": "XRN-426S",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver5.33.12 and earlier"
}
]
},
{
"product": "XRN-820S/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver5.34.12 and earlier"
}
]
},
{
"product": "XRN-1620S/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver5.34.12 and earlier"
}
]
},
{
"product": "XRN-3210R/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver5.34.12 and earlier"
}
]
},
{
"product": "XRN-6410R/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver5.34.12 and earlier"
}
]
},
{
"product": "XRN-6410DR/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver5.34.12 and earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Buffer Overflow vulnerability exists in multiple versions of TB-eye network recorders and AHD recorders. The CGI process may be terminated abnormally by processing a specially crafted request."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "Buffer overflow",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-06-27T05:24:04.762Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.tbeye.com/topics/ahd/"
},
{
"url": "https://jvn.jp/en/vu/JVNVU93396297/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2025-41418",
"datePublished": "2025-06-27T05:24:04.762Z",
"dateReserved": "2025-06-24T23:58:21.302Z",
"dateUpdated": "2025-06-27T05:24:04.762Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2025-36529
Vulnerability from cvelistv5
Published
2025-06-27 05:23
Modified
2025-06-27 05:23
Severity ?
7.2 (High) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
8.6 (High) - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
8.6 (High) - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS score ?
Summary
An OS command injection issue exists in multiple versions of TB-eye network recorders and AHD recorders. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who is logging in to the device.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "XRN-410SN/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver2.47b_220119153805 and earlier"
}
]
},
{
"product": "XRN-810SN/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver2.47b_220119153805 and earlier"
}
]
},
{
"product": "XRN-1610SN/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver2.47b_210516234524 and earlier"
}
]
},
{
"product": "PRN-4011N/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver2.51p_231208081715 and earlier"
}
]
},
{
"product": "HRX-421FN/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver3.05.62 and earlier"
}
]
},
{
"product": "HRX-821/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver3.05.62 and earlier"
}
]
},
{
"product": "HRX-1621/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver3.05.62 and earlier"
}
]
},
{
"product": "HRX-435FN/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver5.31.72 and earlier"
}
]
},
{
"product": "HRX-835/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver5.31.72 and earlier"
}
]
},
{
"product": "HRX-1635/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver5.31.72 and earlier"
}
]
},
{
"product": "XRN-425SFN/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver5.31.32 and earlier"
}
]
},
{
"product": "XRN-426S",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver5.33.12 and earlier"
}
]
},
{
"product": "XRN-820S/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver5.34.12 and earlier"
}
]
},
{
"product": "XRN-1620S/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver5.34.12 and earlier"
}
]
},
{
"product": "XRN-3210R/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver5.34.12 and earlier"
}
]
},
{
"product": "XRN-6410R/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver5.34.12 and earlier"
}
]
},
{
"product": "XRN-6410DR/TE",
"vendor": "TB-eye Ltd.",
"versions": [
{
"status": "affected",
"version": "firmware versions Ver5.34.12 and earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An OS command injection issue exists in multiple versions of TB-eye network recorders and AHD recorders. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who is logging in to the device."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "Improper neutralization of special elements used in an OS command (\u0027OS Command Injection\u0027)",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-06-27T05:23:27.330Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.tbeye.com/topics/ahd/"
},
{
"url": "https://jvn.jp/en/vu/JVNVU93396297/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2025-36529",
"datePublished": "2025-06-27T05:23:27.330Z",
"dateReserved": "2025-06-24T23:58:17.896Z",
"dateUpdated": "2025-06-27T05:23:27.330Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}