Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: TP-Link Systems VIGI NVR1104H-4P V1, VIGI NVR2016H-16MP V2 — tp-link.com/us/support/faq/4547 Clear all filters
TI-2025-07049 CVE-2025-7724 · GHSA-2gfp-c6c8-h38v

Unauthenticated command injection on VIGI NVR1104H-4P V1 and VIGI NVR2016H-16MP V2

Priority MEDIUM 47

An unauthenticated OS command injection vulnerability exists in VIGI NVR1104H-4P V1 and VIGI NVR2016H-16MP V2.This issue affects VIGI NVR1104H-4P V1: before 1.1.5 Build 250518; VIGI NVR2016H-16MP V2: before 1.3.1 Build 2…

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.00838 Published 2025-07-22 Fixed in 1.1.5 Build 250518, 1.3.1 Build 250407 CWE-78
TI-2025-07048 CVE-2025-7723 · GHSA-h2qv-8rr4-vmcr

Authenticated command injection on VIGI NVR1104H-4P V1 and VIGI NVR2016H-16MP V2

Priority MEDIUM 40

A command injection vulnerability exists that can be exploited after authentication in VIGI NVR1104H-4P V1 and VIGI NVR2016H-16MP V2.This issue affects VIGI NVR1104H-4P V1: before 1.1.5 Build 250518; VIGI NVR2016H-16MP V…

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.00748 Published 2025-07-22 Fixed in 1.1.5 Build 250518, 1.3.1 Build 250407 CWE-78