{"affected":[{"affectedData":[{"platforms":["TAT-76 series"],"product":"DVR","vendor":"TONNET","versions":[{"lessThanOrEqual":"20191216","status":"affected","version":"0","versionType":"custom"}]},{"platforms":["TAT-77 series"],"product":"DVR","vendor":"TONNET","versions":[{"lessThanOrEqual":"20200213","status":"affected","version":"0","versionType":"custom"}]}],"source":"twcert@cert.org.tw"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:tonnet:tat-77104g1_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"C8E7B343-EFC3-4517-A6E6-15BD2A934232","versionEndIncluding":"tat-77104g1_20190107","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:tonnet:tat-77104g1:-:*:*:*:*:*:*:*","matchCriteriaId":"241B2620-7E8D-4084-BC76-930BA8D34757","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:tonnet:tat-70432n_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"FB8C435E-DF83-4F09-AC8D-5EFB41D21662","versionEndIncluding":"tat-77208g1_20181225","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:tonnet:tat-70432n:-:*:*:*:*:*:*:*","matchCriteriaId":"39B0C7D2-4719-4D4A-BAAC-00D0B4877DC7","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:tonnet:tat-71416g1_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"95377179-581F-4F72-83BC-B136BBD2C41F","versionEndIncluding":"tat-71416g1_20181225","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:tonnet:tat-71416g1:-:*:*:*:*:*:*:*","matchCriteriaId":"1DA39250-CDA5-4457-8477-0A503BCD9718","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:tonnet:tat-71832g1_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"2C8CFCBC-7E99-41C5-81B3-6957B2B91223","versionEndIncluding":"tat-71832g1_20190510","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:tonnet:tat-71832g1:-:*:*:*:*:*:*:*","matchCriteriaId":"CEAC4B5F-BDE4-464B-A0C6-E8805A20D33E","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:tonnet:tat-76104g3_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"716D1F9D-DCE4-4683-9E0D-929706E7AD1E","versionEndIncluding":"20181220_76104g3","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:tonnet:tat-76104g3:-:*:*:*:*:*:*:*","matchCriteriaId":"F4E65CAD-2851-4A91-8263-43287DD9FF84","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:tonnet:tat-76108g3_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"86109F98-ACA7-47AF-87E9-212802BD3D4B","versionEndIncluding":"20181221_76208g3","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:tonnet:tat-76108g3:-:*:*:*:*:*:*:*","matchCriteriaId":"543032E1-AC31-44FB-AE0F-583C2E34D4F6","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:tonnet:tat-76116g3_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"ED374327-CC36-4889-A5DA-B7D23FD870B6","versionEndIncluding":"20181221_76216g3","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:tonnet:tat-76116g3:-:*:*:*:*:*:*:*","matchCriteriaId":"906FA949-47AF-4C98-9469-C39892DB0B70","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:tonnet:tat-76132g3_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"54396F2C-697A-4523-B9A2-D31C8B3CB432","versionEndIncluding":"tat-70832g3_20181221-1","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:tonnet:tat-76132g3:-:*:*:*:*:*:*:*","matchCriteriaId":"63417A1A-E7E7-4E6A-A09B-B539F51BCCC0","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET do not properly verify patch files. Attackers can inject a specific command into a patch file and gain access to the system."},{"lang":"es","value":"El firmware DVR en las series de productos TAT-76 y TAT-77, proporcionados por TONNET, no verifica apropiadamente los archivos de parche. Los atacantes pueden inyectar un comando específico en un archivo de parche y conseguir acceso al sistema."}],"id":"CVE-2020-3924","lastModified":"2026-06-17T03:19:16.317","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":10.0,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":10.0,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.4,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.5,"impactScore":5.9,"source":"twcert@cert.org.tw","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-02-27T04:15:10.670","references":[{"source":"twcert@cert.org.tw","tags":["Third Party Advisory"],"url":"https://tvn.twcert.org.tw/taiwanvn/TVN-201910004"},{"source":"twcert@cert.org.tw","tags":["Third Party Advisory"],"url":"https://www.chtsecurity.com/news/4ef5eb3a-fdc3-4d78-8dd7-ec7213e2bbcf"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://tvn.twcert.org.tw/taiwanvn/TVN-201910004"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://www.chtsecurity.com/news/4ef5eb3a-fdc3-4d78-8dd7-ec7213e2bbcf"}],"sourceIdentifier":"twcert@cert.org.tw","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-77"}],"source":"nvd@nist.gov","type":"Primary"}]}