TB-eye Network and AHD Recorders OS Command Injection Vulnerability

A command injection vulnerability has been identified in TB-eye network recorders and AHD recorders, affecting several firmware versions. This vulnerability allows an attacker who has logged into the device to execute arbitrary operating system commands.

Impact

Exploitation of this vulnerability allows for arbitrary OS command execution on the affected device.

Remediation

Users are advised to update the firmware to the latest version available. For more information, refer to the TB-eye official website. Additionally, it is recommended to change the administrator password to a strong, hard-to-guess one.