Unpatched Five-Year-Old Flaw in TBK DVR Devices Actively Exploited by Threat Actors

Threat actors are taking advantage of an unpatched five-year-old flaw in TBK digital video recording (DVR) devices. The vulnerability, known as CVE-2018-9995, is a critical authentication bypass issue that malicious actors can exploit to gain elevated permissions remotely. Despite the availability of a PoC exploit, there are no fixes that address the vulnerability.

CVE-2018-9995 vulnerability affecting TBK DVR devices

The CVE-2018-9995 vulnerability affecting TBK DVR devices is a critical authentication bypass issue that can allow an unauthorized user to access the device. This vulnerability could eventually lead to an attacker gaining elevated permissions, allowing them to execute arbitrary operating system commands. The CVSS score for this vulnerability is 9.8 out of 10, indicating the severity level assigned to it.

Fortinet Observation

According to Fortinet Labs, there has been an increase in efforts to exploit TBK DVR devices utilizing the CVE-2018-9995 vulnerability. In April 2021, Fortinet recognized over 50,000 attempts to exploit these devices. The increased exploitation indicates that the vulnerability could be used as a vector to intrude into a trusted network.

Absence of Fixes for the CVE-2018-9995 Vulnerability

Despite a proof-of-concept (PoC) exploit being available, no fixes have been proposed to address the CVE-2018-9995 vulnerability. As a result, attackers can take advantage of the vulnerability to exploit TBK DVR devices.

Affected product lines and rebranded products

The CVE-2018-9995 vulnerability affects the TBK DVR4104 and DVR4216 product lines. However, some rebranded products purchased under different brand names are also impacted by this flaw.

CVE-2016-20016 vulnerability affecting MVPower CCTV DVR models

Fortinet also warned of a surge in exploitation of CVE-2016-20016, which affects MVPower CCTV DVR models. This critical vulnerability could be exploited by remotely unauthenticated attackers to execute arbitrary operating system commands as root because of the presence of a web shell that is accessible over a /shell URI.

Attractiveness of the CVE-2018-9995 Vulnerability to Attackers

The vulnerability in TBK DVR devices is an easy target for attackers. There is publicly available proof-of-concept code that attackers can use, and the vulnerability is easy to exploit. With tens of thousands of TBK DVRs available under different brands, the CVE-2018-9995 vulnerability is a tempting target for malicious actors.

The Popularity of Network Camera Devices as a Target for Attackers

The recent spike in IPS detections indicates that network camera devices remain popular targets for attackers. The vulnerability CVE-2018-9995 demonstrates that there is a continued need for upgrades and patches to strengthen the security of IoT devices.

Fortinet issued an outbreak alert on May 1, 2023, warning about the ongoing exploitation of vulnerable TBK DVR devices. The report emphasizes the need for quick action to confront the vulnerabilities demonstrated in IoT security threats.

The continued exploitation of the CVE-2018-9995 vulnerability affecting TBK DVR devices is a cause for concern. The lack of fixes or solutions for this vulnerability may expose organizations to attacks that could lead to severe data breaches. This alert is a reminder for users to adopt standard security measures, such as updating firmware, and preventing unauthorized access to their network. Organizations that employ IoT devices or DVRs should regularly update their systems, continuously scan their environment, and implement strict security protocols.

Explore more

How Does Wix-PayPal Partnership Benefit U.S. Merchants?

Merchants continually seek innovations to streamline operations and boost customer satisfaction. An exciting development has emerged from the partnership between Wix and PayPal, promising impactful enhancements for U.S. merchants. This collaboration might just be what it takes to redefine success in today’s competitive digital payment landscape. Why This Story Matters In an era where digital transactions dominate, U.S. merchants face

Trend Analysis: AI in Contact Center Solutions

Imagine a contact center where AI-driven technology not only anticipates customer queries but also ensures a seamless, multilingual dialogue, enhancing both satisfaction and compliance. AI in contact center solutions is no longer a future concept; it’s reshaping the industry landscape today, offering an unprecedented blend of efficiency and customization. As businesses strive to meet escalating consumer expectations, the integration of

Can Stablecoins Balance Privacy and Crime Prevention?

The emergence of stablecoins in the cryptocurrency landscape has introduced a crucial dilemma between safeguarding user privacy and mitigating financial crime. Recent incidents involving Tether’s ability to freeze funds linked to illicit activities underscore the tension between these objectives. Amid these complexities, stablecoins continue to attract attention as both reliable transactional instruments and potential tools for crime prevention, prompting a

AI-Driven Payment Routing – Review

In a world where every business transaction relies heavily on speed and accuracy, AI-driven payment routing emerges as a groundbreaking solution. Designed to amplify global payment authorization rates, this technology optimizes transaction conversions and minimizes costs, catalyzing new dynamics in digital finance. By harnessing the prowess of artificial intelligence, the model leverages advanced analytics to choose the best acquirer paths,

How Are AI Agents Revolutionizing SME Finance Solutions?

Can AI agents reshape the financial landscape for small and medium-sized enterprises (SMEs) in such a short time that it seems almost overnight? Recent advancements suggest this is not just a possibility but a burgeoning reality. According to the latest reports, AI adoption in financial services has increased by 60% in recent years, highlighting a rapid transformation. Imagine an SME