Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Qvis records in CISA KEVNo Qvis vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 54
QVIS NVR DVR before 2021-12-13 is vulnerable to Remote Code Execution via Java deserialization.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.09191 · Published 2022-07-17 · No fix listed CWE-502
Priority LOW 34
In QVIS NVR DVR before 2021-12-13, an attacker can escalate privileges from a qvisdvr user to the root user by abusing a Sudo misconfiguration.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00318 · Published 2022-07-17 · No fix listed
Open these records in search →