CVE-2024-3721: Tbk Dvr-4104

Medium severity, CVSS 6.3. EPSS: 86.5% chance of exploitation in the next 30 days.

A vulnerability was found in TBK DVR-4104 and DVR-4216 up to 20240412 and classified as critical. This issue affects some unknown processing of the file /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___. The manipulation of the argument mdb/mdc leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-260573 was assigned to this vulnerability.

Affected products

• Tbk Dvr-4104: version 20240412 only
• Tbk Dvr-4216: version 20240412 only
• Tbkvision Tbk-DVR4104: version 0 only
• Tbkvision Tbk-DVR4216: version 0 only

Published 2024-04-13. Last modified 2026-06-17.