CVEvulnerability
CVE-2021-44954
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-07-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
In QVIS NVR DVR before 2021-12-13, an attacker can escalate privileges from a qvisdvr user to the root user by abusing a Sudo misconfiguration.
Affected configurations
• qvis dvr firmware (< 2021-12-13)
• qvis nvr firmware (< 2021-12-13)
References
- https://gist.github.com/Meeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee/a670418d51051d4e6513d86e84e8d5b8 Third Party Advisory
- https://twitter.com/Me9187/status/1414906288287404039 Exploit, Third Party Advisory
- https://gist.github.com/Meeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee/a670418d51051d4e6513d86e84e8d5b8 Third Party Advisory
- https://twitter.com/Me9187/status/1414906288287404039 Exploit, Third Party Advisory