VYPR

TV7108HE

by MVPower

CVEs (1)

  • CVE-2016-20016CriOct 19, 2022
    risk 0.74cvss 9.8epss 0.87

    MVPower CCTV DVR models, including TV-7104HE 1.8.4 115215B9 and TV7108HE, contain a web shell that is accessible via a /shell URI. A remote unauthenticated attacker can execute arbitrary operating system commands as root. This vulnerability has also been referred to as the "JAWS…