CVE-2024-43778: Takenaka Engineering AHD04T-A Firmware
High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.
OS command injection vulnerability in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings.
Affected products
- Takenaka Engineering AHD04T-A Firmware: before 7xx10.1.900055.65 (fixed in 7xx10.1.900055.65)
- Takenaka Engineering AHD08T-A Firmware: before 7xx10.1.900055.65 (fixed in 7xx10.1.900055.65)
- Takenaka Engineering AHD16T-A Firmware: before 7xx10.1.900055.65 (fixed in 7xx10.1.900055.65)
- Takenaka Engineering Hdvr-1600 Firmware: before 53310.1.900111.65 (fixed in 53310.1.900111.65)
- Takenaka Engineering Hdvr-400 Firmware: before 46110.1.100869.65 (fixed in 46110.1.100869.65)
- Takenaka Engineering Hdvr-800 Firmware: before 53210.1.900103.65 (fixed in 53210.1.900103.65)
- Takenaka Engineering NVR04T-A Firmware: before 56x10.1.100540.65 (fixed in 56x10.1.100540.65)
- Takenaka Engineering NVR08T-A Firmware: before 56x10.1.100540.65 (fixed in 56x10.1.100540.65)
- Takenaka Engineering NVR16T-A Firmware: before 49310.1.100540.65 (fixed in 49310.1.100540.65)
- Takenaka Engineering Co., Ltd AHD04T-A: before 7xx10.1.900055.65 (fixed in 7xx10.1.900055.65)
- Takenaka Engineering Co., Ltd AHD08T-A: before 7xx10.1.900055.65 (fixed in 7xx10.1.900055.65)
- Takenaka Engineering Co., Ltd AHD16T-A: before 7xx10.1.900055.65 (fixed in 7xx10.1.900055.65)
- Takenaka Engineering Co., Ltd Hdvr-1600: before 53310.1.900111.65 (fixed in 53310.1.900111.65)
- Takenaka Engineering Co., Ltd Hdvr-400: before 46110.1.100869.65 (fixed in 46110.1.100869.65)
- Takenaka Engineering Co., Ltd Hdvr-800: before 53210.1.900103.65 (fixed in 53210.1.900103.65)
- Takenaka Engineering Co., Ltd NVR04T-A: before 56x10.1.100540.65 (fixed in 56x10.1.100540.65)
- Takenaka Engineering Co., Ltd NVR08T-A: before 56x10.1.100540.65 (fixed in 56x10.1.100540.65)
- Takenaka Engineering Co., Ltd NVR16T-A: before 49310.1.100540.65 (fixed in 49310.1.100540.65)
Published 2024-09-18. Last modified 2026-06-17.