CVE-2024-47001

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-09-18 · updated 2026-06-17
Weakness: CWE-912

Description

Hidden functionality issue in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings.

Affected products

Takenaka Engineering Ahd04T-A Firmware: before 7xx10.1.900055.65 — fixed in 7xx10.1.900055.65
Takenaka Engineering Ahd08T-A Firmware: before 7xx10.1.900055.65 — fixed in 7xx10.1.900055.65
Takenaka Engineering Ahd16T-A Firmware: before 7xx10.1.900055.65 — fixed in 7xx10.1.900055.65
Takenaka Engineering Hdvr-1600 Firmware: before 53310.1.900111.65 — fixed in 53310.1.900111.65
Takenaka Engineering Hdvr-400 Firmware: before 46110.1.100869.65 — fixed in 46110.1.100869.65
Takenaka Engineering Hdvr-800 Firmware: before 53210.1.900103.65 — fixed in 53210.1.900103.65
Takenaka Engineering Nvr04T-A Firmware: before 56x10.1.100540.65 — fixed in 56x10.1.100540.65
Takenaka Engineering Nvr08T-A Firmware: before 56x10.1.100540.65 — fixed in 56x10.1.100540.65
Takenaka Engineering Nvr16T-A Firmware: before 49310.1.100540.65 — fixed in 49310.1.100540.65

How to fix

Upgrade to a fixed version: Takenaka Engineering Ahd04T-A Firmware 7xx10.1.900055.65; Takenaka Engineering Ahd08T-A Firmware 7xx10.1.900055.65; Takenaka Engineering Ahd16T-A Firmware 7xx10.1.900055.65; Takenaka Engineering Hdvr-1600 Firmware 53310.1.900111.65; Takenaka Engineering Hdvr-400 Firmware 46110.1.100869.65; Takenaka Engineering Hdvr-800 Firmware 53210.1.900103.65; Takenaka Engineering Nvr04T-A Firmware 56x10.1.100540.65; Takenaka Engineering Nvr08T-A Firmware 56x10.1.100540.65; Takenaka Engineering Nvr16T-A Firmware 49310.1.100540.65. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-47001 or the next vulnerability affects your stack