Read the docs

TONNET

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

TONNET records in CISA KEV

No TONNET vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tat-70432n Firmware 2 records MEDIUM Tat-71416g1 Firmware 2 records MEDIUM Tat-71832g1 Firmware 2 records MEDIUM Tat-76104g3 Firmware 2 records MEDIUM Tat-76108g3 Firmware 2 records MEDIUM Tat-76116g3 Firmware 2 records MEDIUM Tat-76132g3 Firmware 2 records MEDIUM Tat-77104g1 Firmware 2 records MEDIUM

Records

3 records

TI-2020-03424 CVE-2020-3924 · GHSA-xv64-jjpm-mgjv

TONNET DVR – Firmware Injection

Priority MEDIUM 45

DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET do not properly verify patch files.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01258 Published 2020-02-27 No fix listed CWE-77
TI-2020-03423 CVE-2020-3923 · GHSA-jvq4-xpx6-3rjc

TONNET DVR – Broken Access Control

Priority MEDIUM 45

DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET, contain misconfigured authentication mechanism.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01679 Published 2020-02-27 No fix listed CWE-287
TI-2026-07916 CVE-2026-9003 · GHSA-vp9q-mvq5-jq9m

TONNET｜E-LAN Hybrid Recording System - SQL Injection

Priority MEDIUM 44

E-LAN Hybrid Recording System developed by TONNET has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00539 Published 2026-05-20 Fixed in mdiskTRS08_tonnet_20260203-1636 CWE-89
Open these records in search →