Improper authentication in TAKENAKA ENGINEERING CO., LTD. HDVR-400
Priority MEDIUM 41CWE-287Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-287.
Summary
Improper authentication vulnerability in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00513 43rd percentileScored 2026-11-07
Fix Fixed HDVR-400 (TAKENAKA ENGINEERING CO., LTD.): 46110.1.100869.65HDVR-800 (TAKENAKA ENGINEERING CO., LTD.): 53210.1.900103.65+7 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| TAKENAKA ENGINEERING CO., LTD. | HDVR-400 | before 46110.1.100869.65 | 46110.1.100869.65 | Patch available | CNA |
| TAKENAKA ENGINEERING CO., LTD. | HDVR-800 | before 53210.1.900103.65 | 53210.1.900103.65 | Patch available | CNA |
| TAKENAKA ENGINEERING CO., LTD. | HDVR-1600 | before 53310.1.900111.65 | 53310.1.900111.65 | Patch available | CNA |
| TAKENAKA ENGINEERING CO., LTD. | AHD04T-A | before 7xx10.1.900055.65 | 7xx10.1.900055.65 | Patch available | CNA |
| TAKENAKA ENGINEERING CO., LTD. | AHD08T-A | before 7xx10.1.900055.65 | 7xx10.1.900055.65 | Patch available | CNA |
| TAKENAKA ENGINEERING CO., LTD. | AHD16T-A | before 7xx10.1.900055.65 | 7xx10.1.900055.65 | Patch available | CNA |
| TAKENAKA ENGINEERING CO., LTD. | NVR04T-A | before 56x10.1.100540.65 | 56x10.1.100540.65 | Patch available | CNA |
| TAKENAKA ENGINEERING CO., LTD. | NVR08T-A | before 56x10.1.100540.65 | 56x10.1.100540.65 | Patch available | CNA |
| TAKENAKA ENGINEERING CO., LTD. | NVR16T-A | before 49310.1.100540.65 | 49310.1.100540.65 | Patch available | CNA |
- HDVR-400 VendorTAKENAKA ENGINEERING CO., LTD. Affected before 46110.1.100869.65 Fixed in 46110.1.100869.65 Patch available CNA
- HDVR-800 VendorTAKENAKA ENGINEERING CO., LTD. Affected before 53210.1.900103.65 Fixed in 53210.1.900103.65 Patch available CNA
- HDVR-1600 VendorTAKENAKA ENGINEERING CO., LTD. Affected before 53310.1.900111.65 Fixed in 53310.1.900111.65 Patch available CNA
- AHD04T-A VendorTAKENAKA ENGINEERING CO., LTD. Affected before 7xx10.1.900055.65 Fixed in 7xx10.1.900055.65 Patch available CNA
- AHD08T-A VendorTAKENAKA ENGINEERING CO., LTD. Affected before 7xx10.1.900055.65 Fixed in 7xx10.1.900055.65 Patch available CNA
- AHD16T-A VendorTAKENAKA ENGINEERING CO., LTD. Affected before 7xx10.1.900055.65 Fixed in 7xx10.1.900055.65 Patch available CNA
- NVR04T-A VendorTAKENAKA ENGINEERING CO., LTD. Affected before 56x10.1.100540.65 Fixed in 56x10.1.100540.65 Patch available CNA
- NVR08T-A VendorTAKENAKA ENGINEERING CO., LTD. Affected before 56x10.1.100540.65 Fixed in 56x10.1.100540.65 Patch available CNA
- NVR16T-A VendorTAKENAKA ENGINEERING CO., LTD. Affected before 49310.1.100540.65 Fixed in 49310.1.100540.65 Patch available CNA
CPE names CISA-ADP · 9
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:takenaka_engineering:hdvr-400_firmware:*:*:*:*:*:*:*:* | — | — | TAKENAKA ENGINEERING CO., LTD. |
| cpe:2.3:o:takenaka_engineering:hdvr-800_firmware:*:*:*:*:*:*:*:* | — | — | TAKENAKA ENGINEERING CO., LTD. |
| cpe:2.3:o:takenaka_engineering:hdvr-1600_firmware:*:*:*:*:*:*:*:* | — | — | TAKENAKA ENGINEERING CO., LTD. |
| cpe:2.3:o:takenaka_engineering:ahd04t-a_firmware:*:*:*:*:*:*:*:* | — | — | TAKENAKA ENGINEERING CO., LTD. |
| cpe:2.3:o:takenaka_engineering:ahd08t-a_firmware:*:*:*:*:*:*:*:* | — | — | TAKENAKA ENGINEERING CO., LTD. |
| cpe:2.3:o:takenaka_engineering:ahd16t-a_firmware:*:*:*:*:*:*:*:* | — | — | TAKENAKA ENGINEERING CO., LTD. |
| cpe:2.3:o:takenaka_engineering:nvr04t-a_firmware:*:*:*:*:*:*:*:* | — | — | TAKENAKA ENGINEERING CO., LTD. |
| cpe:2.3:o:takenaka_engineering:nvr08t-a_firmware:*:*:*:*:*:*:*:* | — | — | TAKENAKA ENGINEERING CO., LTD. |
| cpe:2.3:o:takenaka_engineering:nvr16t-a_firmware:*:*:*:*:*:*:*:* | — | — | TAKENAKA ENGINEERING CO., LTD. |
- cpe:2.3:o:takenaka_engineering:hdvr-400_firmware:*:*:*:*:*:*:*:* Versions — — ·TAKENAKA ENGINEERING CO., LTD.
- cpe:2.3:o:takenaka_engineering:hdvr-800_firmware:*:*:*:*:*:*:*:* Versions — — ·TAKENAKA ENGINEERING CO., LTD.
- cpe:2.3:o:takenaka_engineering:hdvr-1600_firmware:*:*:*:*:*:*:*:* Versions — — ·TAKENAKA ENGINEERING CO., LTD.
- cpe:2.3:o:takenaka_engineering:ahd04t-a_firmware:*:*:*:*:*:*:*:* Versions — — ·TAKENAKA ENGINEERING CO., LTD.
- cpe:2.3:o:takenaka_engineering:ahd08t-a_firmware:*:*:*:*:*:*:*:* Versions — — ·TAKENAKA ENGINEERING CO., LTD.
- cpe:2.3:o:takenaka_engineering:ahd16t-a_firmware:*:*:*:*:*:*:*:* Versions — — ·TAKENAKA ENGINEERING CO., LTD.
- cpe:2.3:o:takenaka_engineering:nvr04t-a_firmware:*:*:*:*:*:*:*:* Versions — — ·TAKENAKA ENGINEERING CO., LTD.
- cpe:2.3:o:takenaka_engineering:nvr08t-a_firmware:*:*:*:*:*:*:*:* Versions — — ·TAKENAKA ENGINEERING CO., LTD.
- cpe:2.3:o:takenaka_engineering:nvr16t-a_firmware:*:*:*:*:*:*:*:* Versions — — ·TAKENAKA ENGINEERING CO., LTD.
Remediation
- Fix · CNA HDVR-400 (TAKENAKA ENGINEERING CO., LTD.) Fixed in 46110.1.100869.65
- Fix · CNA HDVR-800 (TAKENAKA ENGINEERING CO., LTD.) Fixed in 53210.1.900103.65
- Fix · CNA HDVR-1600 (TAKENAKA ENGINEERING CO., LTD.) Fixed in 53310.1.900111.65
- Fix · CNA AHD04T-A (TAKENAKA ENGINEERING CO., LTD.) Fixed in 7xx10.1.900055.65
- Fix · CNA AHD08T-A (TAKENAKA ENGINEERING CO., LTD.) Fixed in 7xx10.1.900055.65
- Fix · CNA AHD16T-A (TAKENAKA ENGINEERING CO., LTD.) Fixed in 7xx10.1.900055.65
- Fix · CNA NVR04T-A (TAKENAKA ENGINEERING CO., LTD.) Fixed in 56x10.1.100540.65
- Fix · CNA NVR08T-A (TAKENAKA ENGINEERING CO., LTD.) Fixed in 56x10.1.100540.65
- Fix · CNA NVR16T-A (TAKENAKA ENGINEERING CO., LTD.) Fixed in 49310.1.100540.65
Timeline
- 2026-10-02 Threatist record created from CVE-2024-41929
- 2026-10-03 Alias added: GHSA-5p8v-m885-q5fg
References
More TAKENAKA ENGINEERING CO., LTD. vulnerabilities
- TI-2024-29373 OS command injection in TAKENAKA ENGINEERING CO., LTD. HDVR-400 CVSS 3.1HIGH 8.8
- TI-2024-31389 Hidden functionality issue in multiple digital video recorders provided by TAKENAKA… CVSS 3.1HIGH 8.8
Sources
- CVE-2024-41929 · CVE Program
- CVE-2024-41929 · NVD
- FIRST EPSS
- GHSA-5p8v-m885-q5fg · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences