Read the docs

Xiongmai

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Xiongmai records in CISA KEV

No Xiongmai vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-03511 CVE-2024-3765 · GHSA-684w-rg22-c86m

Xiongmai AHB7804R-MH-V2 Sofia Service access control

Priority HIGH 82

A vulnerability classified as critical was found in Xiongmai AHB7804R-MH-V2, AHB8004T-GL, AHB8008T-GL, AHB7004T-GS-V3, AHB7004T-MHV2, AHB8032F-LME and XM530_R80X30-PQ_8M.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01256 Published 2024-04-14 No fix listed CWE-284
TI-2026-26343 CVE-2026-34005 · GHSA-2969-xpvc-282x

OS command injection in Xiongmai DVR/NVR devices

Priority MEDIUM 43

In Sofia on Xiongmai DVR/NVR (AHB7008T-MH-V2 and NBD7024H-P) 4.03.R11 devices, root OS command injection can occur via shell metacharacters in the HostName value via an authenticated DVRIP protocol (TCP port 34567) reque…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01567 Published 2026-03-29 No fix listed CWE-78
Open these records in search →