CVE-2024-3721 | TBK DVR-4104/DVR-4216 up to 20240412 device.rsp mdb/mdc os command injection

A vulnerability was found in TBK DVR-4104 and DVR-4216 up to 20240412 and classified as critical. This issue affects some unknown processing of the file /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___. The manipulation of the argument mdb/mdc leads to os command injection.

The identification of this vulnerability is CVE-2024-3721. The attack may be initiated remotely. Furthermore, there is an exploit available.