CVE:CVE-2021-44954
CNNVD:CNNVD-202207-1455
QVIS NVR Camera Management System是QVIS公司的一个监控系统。
QVIS NVR Camera Management System 存在安全漏洞。攻击者可以通过滥用 Sudo 错误配置将权限从 qvisdvr 用户升级到 root 用户。
solution:Upgrade qvis dvr_firmware to a higher version than 2021-12-13,and avoid the version (,2021-12-13); Upgrade qvis nvr_firmware to a higher version than 2021-12-13,and avoid the version (,2021-12-13)