CVE-2021-41506: Xiongmaitech AHB7008T-Mh-v2 Firmware

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

Xiaongmai AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, HI3518_50H10L_S39 V4.02.R11.7601.Nat.Onvif.20170420, V4.02.R11.Nat.Onvif.20160422, V4.02.R11.7601.Nat.Onvif.20170424, V4.02.R11.Nat.Onvif.20170327, V4.02.R11.Nat.Onvif.20161205, V4.02.R11.Nat.20170301, V4.02.R12.Nat.OnvifS.20170727 is affected by a backdoor in the macGuarder and dvrHelper binaries of DVR/NVR/IP camera firmware due to static root account credentials in the system.

Affected products

• Xiongmaitech AHB7008T-Mh-v2 Firmware: version 4.02.r11.7601.nat.onvif.20170420 only
• Xiongmaitech AHB7804R-Els Firmware: version 4.02.r11.nat.onvif.20160422 only
• Xiongmaitech AHB7804R-Lms Firmware: version 4.02.r11.nat.20170301 only
• Xiongmaitech AHB7804R-Mh-v2 Firmware: version 4.02.r11.7601.nat.onvif.20170424 only
• Xiongmaitech AHB7808R-Ms-v2 Firmware: version 4.02.r11.nat.onvif.20170327 only
• Xiongmaitech AHB7808R-Ms Firmware: version 4.02.r11.nat.onvif.20160328 only
• Xiongmaitech AHB7808T-Ms-v2 Firmware: version 4.02.r11.nat.onvifc.20161205 only
• Xiongmaitech HI3518E 50h10l s39 Firmware: version 4.02.r12.nat.onvifs.20170727 only

Published 2022-06-30. Last modified 2026-06-17.