CVE-2021-44954: Qvis Dvr Firmware

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

In QVIS NVR DVR before 2021-12-13, an attacker can escalate privileges from a qvisdvr user to the root user by abusing a Sudo misconfiguration.

Affected products

• Qvis Dvr Firmware: before 2021-12-13 (fixed in 2021-12-13)
• Qvis NVR Firmware: before 2021-12-13 (fixed in 2021-12-13)

Published 2022-07-18. Last modified 2026-06-17.