CVE-2022-35733: Unimo Udr-JA1004 Firmware

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders (UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier) allows a remote unauthenticated attacker to execute an arbitrary OS command by sending a specially crafted request to the affected device web interface.

Affected products

• Unimo Udr-JA1004 Firmware: up to and including 1.0.20.13
• Unimo Udr-JA1008 Firmware: up to and including 1.0.20.13
• Unimo Udr-JA1016 Firmware: up to and including 2.0.20.13

Published 2022-08-23. Last modified 2026-06-17.