CVE Feed

    Dashboard / CVE / CVE-2022-45045

    CVE-2022-45045

    Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated attacker, possibly using the default admin:tlJwpbo6 credentials, can connect to port 34567 and execute arbitrary operating system commands via a crafted JSON file during an upgrade request. Since at least 2021, Xiongmai has applied patches to prevent attackers from using this mechanism to execute telnetd.

    Published:Dec 1, 2022
    Last Modified:Apr 24, 2025
    EPS:Dec 1, 2022
    EPSS Score:0.00233
    CVSS Score:8.8

    Affected Products

    Vendor
    Xiongmaitech
    Product
    Mbd6304t
    Vendor
    Xiongmaitech
    Product
    Mbd6304t Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd6808t-pl
    Vendor
    Xiongmaitech
    Product
    Nbd6808t-pl Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd7004t-p
    Vendor
    Xiongmaitech
    Product
    Nbd7004t-p Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd7008t-p
    Vendor
    Xiongmaitech
    Product
    Nbd7008t-p Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd7016t-f-v2
    Vendor
    Xiongmaitech
    Product
    Nbd7016t-f-v2 Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd7024h-p
    Vendor
    Xiongmaitech
    Product
    Nbd7024h-p Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd7024t-p
    Vendor
    Xiongmaitech
    Product
    Nbd7024t-p Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd7804r-f\(ep\)
    Vendor
    Xiongmaitech
    Product
    Nbd7804r-f\(ep\) Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd7804r-f\(hdmi\)
    Vendor
    Xiongmaitech
    Product
    Nbd7804r-f\(hdmi\) Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd7804r-fw
    Vendor
    Xiongmaitech
    Product
    Nbd7804r-fw Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd7804t-pl
    Vendor
    Xiongmaitech
    Product
    Nbd7804t-pl Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd7808r-pl\(ep\)
    Vendor
    Xiongmaitech
    Product
    Nbd7808r-pl\(ep\) Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd7808r-pl\(hdmi\)
    Vendor
    Xiongmaitech
    Product
    Nbd7808r-pl\(hdmi\) Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd7808t-pl
    Vendor
    Xiongmaitech
    Product
    Nbd7808t-pl Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd7904r-fs
    Vendor
    Xiongmaitech
    Product
    Nbd7904r-fs Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd7904t-p
    Vendor
    Xiongmaitech
    Product
    Nbd7904t-p Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd7904t-pl
    Vendor
    Xiongmaitech
    Product
    Nbd7904t-pl-xpoe
    Vendor
    Xiongmaitech
    Product
    Nbd7904t-pl-xpoe Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd7904t-pl Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd7904t-plc-xpoe
    Vendor
    Xiongmaitech
    Product
    Nbd7904t-plc-xpoe Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd7904t-q
    Vendor
    Xiongmaitech
    Product
    Nbd7904t-q Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd7908t-q
    Vendor
    Xiongmaitech
    Product
    Nbd7908t-q Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8004r-pl\(ep\)
    Vendor
    Xiongmaitech
    Product
    Nbd8004r-pl\(ep\) Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8004r-yl\(ep\)
    Vendor
    Xiongmaitech
    Product
    Nbd8004r-yl\(ep\) Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8004t-q
    Vendor
    Xiongmaitech
    Product
    Nbd8004t-q Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8008r-pl
    Vendor
    Xiongmaitech
    Product
    Nbd8008r-pl\(ep\)
    Vendor
    Xiongmaitech
    Product
    Nbd8008r-pl\(ep\) Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8008r-pl Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8008r-yl\(ep\)
    Vendor
    Xiongmaitech
    Product
    Nbd8008r-yl\(ep\) Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8008ra-gl
    Vendor
    Xiongmaitech
    Product
    Nbd8008ra-gl Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8008ra-glk
    Vendor
    Xiongmaitech
    Product
    Nbd8008ra-glk Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8008ra-ul\(ep\)
    Vendor
    Xiongmaitech
    Product
    Nbd8008ra-ul\(ep\) Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8008ra-ula
    Vendor
    Xiongmaitech
    Product
    Nbd8008ra-ula Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8008ra-ulk
    Vendor
    Xiongmaitech
    Product
    Nbd8008ra-ulk Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8008t-q
    Vendor
    Xiongmaitech
    Product
    Nbd8008t-q Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8009s-ula-v2
    Vendor
    Xiongmaitech
    Product
    Nbd8009s-ula-v2 Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8010s-kl-v2
    Vendor
    Xiongmaitech
    Product
    Nbd8010s-kl-v2 Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8016r-ul
    Vendor
    Xiongmaitech
    Product
    Nbd8016r-ul Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8016ra-k\(ep\)
    Vendor
    Xiongmaitech
    Product
    Nbd8016ra-k\(ep\) Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8016ra-ul
    Vendor
    Xiongmaitech
    Product
    Nbd8016ra-ul\(ep\)
    Vendor
    Xiongmaitech
    Product
    Nbd8016ra-ul\(ep\) Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8016ra-ul Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8016ra-ula
    Vendor
    Xiongmaitech
    Product
    Nbd8016ra-ula Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8016ra-ulk
    Vendor
    Xiongmaitech
    Product
    Nbd8016ra-ulk Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8016s-kl-v2
    Vendor
    Xiongmaitech
    Product
    Nbd8016s-kl-v2 Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8016s-ula-v2
    Vendor
    Xiongmaitech
    Product
    Nbd8016s-ula-v2 Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8016t-q-v2
    Vendor
    Xiongmaitech
    Product
    Nbd8016t-q-v2 Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8025r-ul
    Vendor
    Xiongmaitech
    Product
    Nbd8025r-ul Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8032h4-p
    Vendor
    Xiongmaitech
    Product
    Nbd8032h4-p Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8032h4-q
    Vendor
    Xiongmaitech
    Product
    Nbd8032h4-q Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8032h4-qe
    Vendor
    Xiongmaitech
    Product
    Nbd8032h4-qe Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8032h4-ul
    Vendor
    Xiongmaitech
    Product
    Nbd8032h4-ul Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8032h8-p
    Vendor
    Xiongmaitech
    Product
    Nbd8032h8-p Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8032h8-qe
    Vendor
    Xiongmaitech
    Product
    Nbd8032h8-qe Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8032ra-ul-v2
    Vendor
    Xiongmaitech
    Product
    Nbd8032ra-ul-v2 Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8064h8-p
    Vendor
    Xiongmaitech
    Product
    Nbd8064h8-p Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd80n16ra-kl
    Vendor
    Xiongmaitech
    Product
    Nbd80n16ra-kl\(ep\)
    Vendor
    Xiongmaitech
    Product
    Nbd80n16ra-kl\(ep\) Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd80n16ra-kl Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd80s08s-kl\(ep\)
    Vendor
    Xiongmaitech
    Product
    Nbd80s08s-kl\(ep\) Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd80s10s-kl
    Vendor
    Xiongmaitech
    Product
    Nbd80s10s-kl Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd80s16s-kl
    Vendor
    Xiongmaitech
    Product
    Nbd80s16s-kl\(ep\)
    Vendor
    Xiongmaitech
    Product
    Nbd80s16s-kl\(ep\) Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd80s16s-kl Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd80x09ra-kl
    Vendor
    Xiongmaitech
    Product
    Nbd80x09ra-kl Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd80x09s-kl
    Vendor
    Xiongmaitech
    Product
    Nbd80x09s-kl Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd88x09s-kl
    Vendor
    Xiongmaitech
    Product
    Nbd88x09s-kl Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8904r-pl
    Vendor
    Xiongmaitech
    Product
    Nbd8904r-pl Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8904r-yl
    Vendor
    Xiongmaitech
    Product
    Nbd8904r-yl Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8904t-gsc-xpoe
    Vendor
    Xiongmaitech
    Product
    Nbd8904t-gsc-xpoe Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8904t-q
    Vendor
    Xiongmaitech
    Product
    Nbd8904t-q Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8908r-pl
    Vendor
    Xiongmaitech
    Product
    Nbd8908r-pl Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8908r-yl
    Vendor
    Xiongmaitech
    Product
    Nbd8908r-yl Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8908t-pl-xpoe
    Vendor
    Xiongmaitech
    Product
    Nbd8908t-pl-xpoe Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8908t-plc-xpoe
    Vendor
    Xiongmaitech
    Product
    Nbd8908t-plc-xpoe Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8916f4-q
    Vendor
    Xiongmaitech
    Product
    Nbd8916f4-q Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd8916f8-q
    Vendor
    Xiongmaitech
    Product
    Nbd8916f8-q Firmware

    Exploits

    https://vulncheck.com/blog/xiongmai-iot-exploitationhttps://vulncheck.com/blog/xiongmai-iot-exploitation

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High