CVE-2021-41419
Dashboard / Vulnerabilities / CVE-2021-41419
CVE-2021-41419
Published: 18 Jul 2022Last Modified: 10 Mar 2026
Summary:
Details: QVIS NVR DVR before 2021-12-13 is vulnerable to Remote Code Execution via Java deserialization.
References: , https://gist.github.com/Meeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee/712ac36c8a08e2698e875169442a23a4, https://github.com/projectdiscovery/nuclei-templates/blob/master/iot/qvisdvr-deserialization-rce.yaml, https://twitter.com/Me9187/status/1414904314368348163
Affected packages
Package
Name:
Purl:
Affected ranges
Type: N/A
Events:
Introduced- None
Fixed -None
Affected versions
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
