{"cve":"CVE-2022-45045","nvd":{"published":"2022-12-01T05:15:12.043","modified":"2026-06-17T05:09:14.640","status":"Modified","description":"Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated attacker, possibly using the default admin:tlJwpbo6 credentials, can connect to port 34567 and execute arbitrary operating system commands via a crafted JSON file during an upgrade request. Since at least 2021, Xiongmai has applied patches to prevent attackers from using this mechanism to execute telnetd.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":8.8},"cwes":["CWE-78"],"references":["https://vulncheck.com/blog/xiongmai-iot-exploitation","https://vulncheck.com/blog/xiongmai-iot-exploitation"],"products":["xiongmaitech:mbd6304t","xiongmaitech:mbd6304t_firmware","xiongmaitech:nbd6808t-pl","xiongmaitech:nbd6808t-pl_firmware","xiongmaitech:nbd7004t-p","xiongmaitech:nbd7004t-p_firmware","xiongmaitech:nbd7008t-p","xiongmaitech:nbd7008t-p_firmware","xiongmaitech:nbd7016t-f-v2","xiongmaitech:nbd7016t-f-v2_firmware","xiongmaitech:nbd7024h-p","xiongmaitech:nbd7024h-p_firmware","xiongmaitech:nbd7024t-p","xiongmaitech:nbd7024t-p_firmware","xiongmaitech:nbd7804r-f\\(ep\\)","xiongmaitech:nbd7804r-f\\(ep\\)_firmware","xiongmaitech:nbd7804r-f\\(hdmi\\)","xiongmaitech:nbd7804r-f\\(hdmi\\)_firmware","xiongmaitech:nbd7804r-fw","xiongmaitech:nbd7804r-fw_firmware","xiongmaitech:nbd7804t-pl","xiongmaitech:nbd7804t-pl_firmware","xiongmaitech:nbd7808r-pl\\(ep\\)","xiongmaitech:nbd7808r-pl\\(ep\\)_firmware","xiongmaitech:nbd7808r-pl\\(hdmi\\)","xiongmaitech:nbd7808r-pl\\(hdmi\\)_firmware","xiongmaitech:nbd7808t-pl","xiongmaitech:nbd7808t-pl_firmware","xiongmaitech:nbd7904r-fs","xiongmaitech:nbd7904r-fs_firmware","xiongmaitech:nbd7904t-p","xiongmaitech:nbd7904t-p_firmware","xiongmaitech:nbd7904t-pl","xiongmaitech:nbd7904t-pl-xpoe","xiongmaitech:nbd7904t-pl-xpoe_firmware","xiongmaitech:nbd7904t-pl_firmware","xiongmaitech:nbd7904t-plc-xpoe","xiongmaitech:nbd7904t-plc-xpoe_firmware","xiongmaitech:nbd7904t-q","xiongmaitech:nbd7904t-q_firmware","xiongmaitech:nbd7908t-q","xiongmaitech:nbd7908t-q_firmware","xiongmaitech:nbd8004r-pl\\(ep\\)","xiongmaitech:nbd8004r-pl\\(ep\\)_firmware","xiongmaitech:nbd8004r-yl\\(ep\\)","xiongmaitech:nbd8004r-yl\\(ep\\)_firmware","xiongmaitech:nbd8004t-q","xiongmaitech:nbd8004t-q_firmware","xiongmaitech:nbd8008r-pl","xiongmaitech:nbd8008r-pl\\(ep\\)"],"source":"nvd","synced_at":"2026-10-19T21:37:28.463369388+00:00"},"epss":{"cve":"CVE-2022-45045","score":0.02384,"percentile":0.83916,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}