CVE:CVE-2020-3924
CNNVD:CNNVD-202002-1288
Tonnet TAT-76和TAT-77系列中存在命令注入漏洞，该漏洞源于DVR固件没有正确验证补丁文件。攻击者可通过向补丁文件注入命令利用该漏洞获取系统的访问权限。
solution:Upgrade tonnet tat-77104g1_firmware to a higher version than tat-77104g1_20190107,and avoid the version (,tat-77104g1_20190107]; Upgrade tonnet tat-70432n_firmware to a higher version than tat-77208g1_20181225,and avoid the version (,tat-77208g1_20181225]; Upgrade tonnet tat-71416g1_firmware to a higher version than tat-71416g1_20181225,and avoid the version (,tat-71416g1_20181225]; Upgrade tonnet tat-71832g1_firmware to a higher version than tat-71832g1_20190510,and avoid the version (,tat-71832g1_20190510]; Upgrade tonnet tat-76104g3_firmware to a higher version than 20181220_76104g3,and avoid the version (,20181220_76104g3]; Upgrade tonnet tat-76108g3_firmware to a higher version than 20181221_76208g3,and avoid the version (,20181221_76208g3]; Upgrade tonnet tat-76116g3_firmware to a higher version than 20181221_76216g3,and avoid the version (,20181221_76216g3]; Upgrade tonnet tat-76132g3_firmware to a higher version than tat-70832g3_20181221-1,and avoid the version (,tat-70832g3_20181221-1]