{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-02T00:24:55.140","vulnerabilities":[{"cve":{"id":"CVE-2020-3924","sourceIdentifier":"twcert@cert.org.tw","published":"2020-02-27T04:15:10.670","lastModified":"2026-06-17T03:19:16.317","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET do not properly verify patch files. Attackers can inject a specific command into a patch file and gain access to the system."},{"lang":"es","value":"El firmware DVR en las series de productos TAT-76 y TAT-77, proporcionados por TONNET, no verifica apropiadamente los archivos de parche. Los atacantes pueden inyectar un comando específico en un archivo de parche y conseguir acceso al sistema."}],"affected":[{"source":"twcert@cert.org.tw","affectedData":[{"vendor":"TONNET","product":"DVR","platforms":["TAT-76 series"],"versions":[{"version":"0","lessThanOrEqual":"20191216","versionType":"custom","status":"affected"}]},{"vendor":"TONNET","product":"DVR","platforms":["TAT-77 series"],"versions":[{"version":"0","lessThanOrEqual":"20200213","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"twcert@cert.org.tw","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.5,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-77"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tonnet:tat-77104g1_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"tat-77104g1_20190107","matchCriteriaId":"C8E7B343-EFC3-4517-A6E6-15BD2A934232"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tonnet:tat-77104g1:-:*:*:*:*:*:*:*","matchCriteriaId":"241B2620-7E8D-4084-BC76-930BA8D34757"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tonnet:tat-70432n_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"tat-77208g1_20181225","matchCriteriaId":"FB8C435E-DF83-4F09-AC8D-5EFB41D21662"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tonnet:tat-70432n:-:*:*:*:*:*:*:*","matchCriteriaId":"39B0C7D2-4719-4D4A-BAAC-00D0B4877DC7"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tonnet:tat-71416g1_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"tat-71416g1_20181225","matchCriteriaId":"95377179-581F-4F72-83BC-B136BBD2C41F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tonnet:tat-71416g1:-:*:*:*:*:*:*:*","matchCriteriaId":"1DA39250-CDA5-4457-8477-0A503BCD9718"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tonnet:tat-71832g1_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"tat-71832g1_20190510","matchCriteriaId":"2C8CFCBC-7E99-41C5-81B3-6957B2B91223"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tonnet:tat-71832g1:-:*:*:*:*:*:*:*","matchCriteriaId":"CEAC4B5F-BDE4-464B-A0C6-E8805A20D33E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tonnet:tat-76104g3_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"20181220_76104g3","matchCriteriaId":"716D1F9D-DCE4-4683-9E0D-929706E7AD1E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tonnet:tat-76104g3:-:*:*:*:*:*:*:*","matchCriteriaId":"F4E65CAD-2851-4A91-8263-43287DD9FF84"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tonnet:tat-76108g3_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"20181221_76208g3","matchCriteriaId":"86109F98-ACA7-47AF-87E9-212802BD3D4B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tonnet:tat-76108g3:-:*:*:*:*:*:*:*","matchCriteriaId":"543032E1-AC31-44FB-AE0F-583C2E34D4F6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tonnet:tat-76116g3_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"20181221_76216g3","matchCriteriaId":"ED374327-CC36-4889-A5DA-B7D23FD870B6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tonnet:tat-76116g3:-:*:*:*:*:*:*:*","matchCriteriaId":"906FA949-47AF-4C98-9469-C39892DB0B70"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:tonnet:tat-76132g3_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"tat-70832g3_20181221-1","matchCriteriaId":"54396F2C-697A-4523-B9A2-D31C8B3CB432"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tonnet:tat-76132g3:-:*:*:*:*:*:*:*","matchCriteriaId":"63417A1A-E7E7-4E6A-A09B-B539F51BCCC0"}]}]}],"references":[{"url":"https://tvn.twcert.org.tw/taiwanvn/TVN-201910004","source":"twcert@cert.org.tw","tags":["Third Party Advisory"]},{"url":"https://www.chtsecurity.com/news/4ef5eb3a-fdc3-4d78-8dd7-ec7213e2bbcf","source":"twcert@cert.org.tw","tags":["Third Party Advisory"]},{"url":"https://tvn.twcert.org.tw/taiwanvn/TVN-201910004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.chtsecurity.com/news/4ef5eb3a-fdc3-4d78-8dd7-ec7213e2bbcf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}}]}