Read the docs
TI-2023-24563 Aliases CVE-2023-45801GHSA-rf26-vw5r-x96q

Improper authentication in Nadatel DVR

Priority LOW 34CWE-287Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-287.

Summary

Improper Authentication vulnerability in Nadatel DVR allows Information Elicitation.This issue affects DVR: from 3.0.0 before 9.9.0.

Why it matters now

EPSS 0.00722 54th percentileScored 2026-11-07
Fix Fixed DVR (Nadatel): 9.9.0

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
NadatelDVR3.0.0 to before 9.9.09.9.0Patch availableCNA
  • DVR VendorNadatel Affected 3.0.0 to before 9.9.0 Fixed in 9.9.0 Patch available CNA

CPE configurations NVD · 36

CPEVersionsRoleVendor
cpe:2.3:o:nadatel:at-0402r_firmware:*:*:*:*:*:*:*:*3.0.0 to before 9.9.0VulnerableNadatel
cpe:2.3:h:nadatel:at-0402r:-:*:*:*:*:*:*:*not specified by NVDRunning onNadatel
cpe:2.3:o:nadatel:at-0815r_firmware:*:*:*:*:*:*:*:*3.0.0 to before 9.9.0VulnerableNadatel
cpe:2.3:h:nadatel:at-0815r:-:*:*:*:*:*:*:*not specified by NVDRunning onNadatel
cpe:2.3:o:nadatel:at-1623r_firmware:*:*:*:*:*:*:*:*3.0.0 to before 9.9.0VulnerableNadatel
cpe:2.3:h:nadatel:at-1623r:-:*:*:*:*:*:*:*not specified by NVDRunning onNadatel
cpe:2.3:o:nadatel:at-0402l_firmware:*:*:*:*:*:*:*:*3.0.0 to before 9.9.0VulnerableNadatel
cpe:2.3:h:nadatel:at-0402l:-:*:*:*:*:*:*:*not specified by NVDRunning onNadatel
cpe:2.3:o:nadatel:at-0815l_firmware:*:*:*:*:*:*:*:*3.0.0 to before 9.9.0VulnerableNadatel
cpe:2.3:h:nadatel:at-0815l:-:*:*:*:*:*:*:*not specified by NVDRunning onNadatel
  • cpe:2.3:o:nadatel:at-0402r_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 9.9.0 Vulnerable ·Nadatel
  • cpe:2.3:h:nadatel:at-0402r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Nadatel
  • cpe:2.3:o:nadatel:at-0815r_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 9.9.0 Vulnerable ·Nadatel
  • cpe:2.3:h:nadatel:at-0815r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Nadatel
  • cpe:2.3:o:nadatel:at-1623r_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 9.9.0 Vulnerable ·Nadatel
  • cpe:2.3:h:nadatel:at-1623r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Nadatel
  • cpe:2.3:o:nadatel:at-0402l_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 9.9.0 Vulnerable ·Nadatel
  • cpe:2.3:h:nadatel:at-0402l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Nadatel
  • cpe:2.3:o:nadatel:at-0815l_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 9.9.0 Vulnerable ·Nadatel
  • cpe:2.3:h:nadatel:at-0815l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Nadatel
Show 26 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:nadatel:at-1623l_firmware:*:*:*:*:*:*:*:*3.0.0 to before 9.9.0VulnerableNadatel
cpe:2.3:h:nadatel:at-1623l:-:*:*:*:*:*:*:*not specified by NVDRunning onNadatel
cpe:2.3:o:nadatel:at-0402e_firmware:*:*:*:*:*:*:*:*3.0.0 to before 9.9.0VulnerableNadatel
cpe:2.3:h:nadatel:at-0402e:-:*:*:*:*:*:*:*not specified by NVDRunning onNadatel
cpe:2.3:o:nadatel:at-0815e_firmware:*:*:*:*:*:*:*:*3.0.0 to before 9.9.0VulnerableNadatel
cpe:2.3:h:nadatel:at-0815e:-:*:*:*:*:*:*:*not specified by NVDRunning onNadatel
cpe:2.3:o:nadatel:at-1623e_firmware:*:*:*:*:*:*:*:*3.0.0 to before 9.9.0VulnerableNadatel
cpe:2.3:h:nadatel:at-1623e:-:*:*:*:*:*:*:*not specified by NVDRunning onNadatel
cpe:2.3:o:nadatel:at-0402m_firmware:*:*:*:*:*:*:*:*3.0.0 to before 9.9.0VulnerableNadatel
cpe:2.3:h:nadatel:at-0402m:-:*:*:*:*:*:*:*not specified by NVDRunning onNadatel
cpe:2.3:o:nadatel:at-0815m_firmware:*:*:*:*:*:*:*:*3.0.0 to before 9.9.0VulnerableNadatel
cpe:2.3:h:nadatel:at-0815m:-:*:*:*:*:*:*:*not specified by NVDRunning onNadatel
cpe:2.3:o:nadatel:at-1623m_firmware:*:*:*:*:*:*:*:*3.0.0 to before 9.9.0VulnerableNadatel
cpe:2.3:h:nadatel:at-1623m:-:*:*:*:*:*:*:*not specified by NVDRunning onNadatel
cpe:2.3:o:nadatel:at-0413m_firmware:*:*:*:*:*:*:*:*3.0.0 to before 9.9.0VulnerableNadatel
cpe:2.3:h:nadatel:at-0413m:-:*:*:*:*:*:*:*not specified by NVDRunning onNadatel
cpe:2.3:o:nadatel:at-0823m_firmware:*:*:*:*:*:*:*:*3.0.0 to before 9.9.0VulnerableNadatel
cpe:2.3:h:nadatel:at-0823m:-:*:*:*:*:*:*:*not specified by NVDRunning onNadatel
cpe:2.3:o:nadatel:at-1643m_firmware:*:*:*:*:*:*:*:*3.0.0 to before 9.9.0VulnerableNadatel
cpe:2.3:h:nadatel:at-1643m:-:*:*:*:*:*:*:*not specified by NVDRunning onNadatel
cpe:2.3:o:nadatel:at-0413s_firmware:*:*:*:*:*:*:*:*3.0.0 to before 9.9.0VulnerableNadatel
cpe:2.3:h:nadatel:at-0413s:-:*:*:*:*:*:*:*not specified by NVDRunning onNadatel
cpe:2.3:o:nadatel:at-0823s_firmware:*:*:*:*:*:*:*:*3.0.0 to before 9.9.0VulnerableNadatel
cpe:2.3:h:nadatel:at-0823s:-:*:*:*:*:*:*:*not specified by NVDRunning onNadatel
cpe:2.3:o:nadatel:at-1643s_firmware:*:*:*:*:*:*:*:*3.0.0 to before 9.9.0VulnerableNadatel
cpe:2.3:h:nadatel:at-1643s:-:*:*:*:*:*:*:*not specified by NVDRunning onNadatel
  • cpe:2.3:o:nadatel:at-1623l_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 9.9.0 Vulnerable ·Nadatel
  • cpe:2.3:h:nadatel:at-1623l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Nadatel
  • cpe:2.3:o:nadatel:at-0402e_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 9.9.0 Vulnerable ·Nadatel
  • cpe:2.3:h:nadatel:at-0402e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Nadatel
  • cpe:2.3:o:nadatel:at-0815e_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 9.9.0 Vulnerable ·Nadatel
  • cpe:2.3:h:nadatel:at-0815e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Nadatel
  • cpe:2.3:o:nadatel:at-1623e_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 9.9.0 Vulnerable ·Nadatel
  • cpe:2.3:h:nadatel:at-1623e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Nadatel
  • cpe:2.3:o:nadatel:at-0402m_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 9.9.0 Vulnerable ·Nadatel
  • cpe:2.3:h:nadatel:at-0402m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Nadatel
  • cpe:2.3:o:nadatel:at-0815m_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 9.9.0 Vulnerable ·Nadatel
  • cpe:2.3:h:nadatel:at-0815m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Nadatel
  • cpe:2.3:o:nadatel:at-1623m_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 9.9.0 Vulnerable ·Nadatel
  • cpe:2.3:h:nadatel:at-1623m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Nadatel
  • cpe:2.3:o:nadatel:at-0413m_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 9.9.0 Vulnerable ·Nadatel
  • cpe:2.3:h:nadatel:at-0413m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Nadatel
  • cpe:2.3:o:nadatel:at-0823m_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 9.9.0 Vulnerable ·Nadatel
  • cpe:2.3:h:nadatel:at-0823m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Nadatel
  • cpe:2.3:o:nadatel:at-1643m_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 9.9.0 Vulnerable ·Nadatel
  • cpe:2.3:h:nadatel:at-1643m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Nadatel
  • cpe:2.3:o:nadatel:at-0413s_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 9.9.0 Vulnerable ·Nadatel
  • cpe:2.3:h:nadatel:at-0413s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Nadatel
  • cpe:2.3:o:nadatel:at-0823s_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 9.9.0 Vulnerable ·Nadatel
  • cpe:2.3:h:nadatel:at-0823s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Nadatel
  • cpe:2.3:o:nadatel:at-1643s_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 9.9.0 Vulnerable ·Nadatel
  • cpe:2.3:h:nadatel:at-1643s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Nadatel

Remediation

  • Fix · CNA DVR (Nadatel) Fixed in 9.9.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-45801
  2. 2026-10-03 Alias added: GHSA-rf26-vw5r-x96q

References

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences