CVE-2024-29949

https://notcve.org/view.php?id=CVE-2024-29949

02 Apr 2024 — There is a command injection vulnerability in some Hikvision NVRs. This could allow an authenticated user with administrative rights to execute arbitrary commands. Existe una vulnerabilidad de inyección de comandos en algunos NVR de Hikvision. Esto podría permitir que un usuario autenticado con derechos administrativos ejecute comandos arbitrarios. • https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-hikvision-nvr-devices • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •