CVE-2022-45045 (GCVE-0-2022-45045)
Vulnerability from cvelistv5
Published
2022-12-01 00:00
Modified
2025-04-24 20:09
Severity ?
8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
  • n/a
Summary
Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated attacker, possibly using the default admin:tlJwpbo6 credentials, can connect to port 34567 and execute arbitrary operating system commands via a crafted JSON file during an upgrade request. Since at least 2021, Xiongmai has applied patches to prevent attackers from using this mechanism to execute telnetd.
References
cve@mitre.orghttps://vulncheck.com/blog/xiongmai-iot-exploitationExploit, Technical Description, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://vulncheck.com/blog/xiongmai-iot-exploitationExploit, Technical Description, Third Party Advisory
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T14:01:31.484Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://vulncheck.com/blog/xiongmai-iot-exploitation"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-45045",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-24T20:08:11.609360Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-78",
                "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-24T20:09:06.565Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated attacker, possibly using the default admin:tlJwpbo6 credentials, can connect to port 34567 and execute arbitrary operating system commands via a crafted JSON file during an upgrade request. Since at least 2021, Xiongmai has applied patches to prevent attackers from using this mechanism to execute telnetd."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-12-01T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://vulncheck.com/blog/xiongmai-iot-exploitation"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2022-45045",
    "datePublished": "2022-12-01T00:00:00.000Z",
    "dateReserved": "2022-11-08T00:00:00.000Z",
    "dateUpdated": "2025-04-24T20:09:06.565Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-45045\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2022-12-01T05:15:12.043\",\"lastModified\":\"2025-04-24T20:15:29.603\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated attacker, possibly using the default admin:tlJwpbo6 credentials, can connect to port 34567 and execute arbitrary operating system commands via a crafted JSON file during an upgrade request. Since at least 2021, Xiongmai has applied patches to prevent attackers from using this mechanism to execute telnetd.\"},{\"lang\":\"es\",\"value\":\"M\u00faltiples dispositivos Xiongmai NVR, incluidos MBD6304T V4.02.R11.00000117.10001.131900.00000 y NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, permiten a los usuarios autenticados ejecutar comandos arbitrarios como root, tal como se explotan en la naturaleza comenzando en aproximadamente 2019. Un atacante remoto y autenticado, posiblemente usando las credenciales predeterminadas admin:tlJwpbo6, puede conectarse al puerto 34567 y ejecutar comandos arbitrarios del Sistema Operativo a trav\u00e9s de un archivo JSON manipulado durante una solicitud de actualizaci\u00f3n. Al menos desde 2021, Xiongmai ha aplicado parches para evitar que los atacantes utilicen este mecanismo para ejecutar telnetd.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-78\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-78\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:mbd6304t:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0EF9E45-B285-4219-8406-7D99281C4432\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd6808t-pl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"15A8ED9A-0396-4E1B-9B1E-C739C399AD30\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7004t-p:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"62D9E3EB-A353-4616-9256-955FB18EB949\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7008t-p:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"247058F2-6786-4964-BB1E-E47B7941F5B5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7016t-f-v2:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0775E25C-C5F4-47D7-A70F-408AC1684691\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7024h-p:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6F972B28-9D67-41DD-BED6-067BA99FF63E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7024t-p:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CDC3421F-BF0B-4055-8168-70937A2C5155\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7804r-f\\\\(ep\\\\):*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7677AA6E-ECCC-4C0E-9AC1-D08576484CE6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7804r-f\\\\(hdmi\\\\):*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A3163EBA-72C4-4AB4-9E11-8D235FE9B776\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7804r-fw:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"19044BA8-49BA-46D5-8BC8-E06802EE3BB0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7804t-pl:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6F18759D-A626-4719-BC8A-0D6D8E7F4C8B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7808r-pl\\\\(ep\\\\):*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8B0F15B1-4BC7-44AA-B2B9-0B442EE3230E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7808r-pl\\\\(hdmi\\\\):*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A10D6B24-4476-4160-B4CE-453A510C62D0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7808t-pl:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"27FD1B8D-46FA-49CD-9089-BC44842E082C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7904r-fs:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EA855432-65B6-47C6-A36B-39E6FA0503DB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7904t-p:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4090396F-6956-4E76-8CF1-7E948B8EA809\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7904t-pl:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BACBC893-3722-4624-A1A5-D7A89E279186\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7904t-pl-xpoe:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"99C66DA3-46C3-494C-B3E0-2FC868CD1CB4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7904t-plc-xpoe:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"26399E7B-C010-4AAB-918A-2CB442246D6B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7904t-q:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"875D2D22-42BD-442F-9619-9F778B7B39BA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7908t-q:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"15EBCA58-E85D-4CC8-A055-B3AD082A8FAC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8004r-pl\\\\(ep\\\\):*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"764FFD3C-7206-4109-836C-499FBF273A62\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8004r-yl\\\\(ep\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DAC2519C-904D-41C3-9646-9CE85FA28FAD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8004t-q:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2EEE046B-6EEE-4FE0-9F3D-EEA32CB090F4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8008r-pl:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"71E90B17-FC96-46E2-9772-62AA781AB640\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8008r-pl\\\\(ep\\\\):*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CC706DC2-89E1-432A-BFF6-317FF8F92FD4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8008r-yl\\\\(ep\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"938B76B6-A572-4C4C-A795-5A4F3B87A5D0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8008ra-gl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0EDA0E4D-9F90-4EC5-9379-FD455326E04D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8008ra-glk:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9CC8CACE-43B5-4F6A-AC88-17A2EFD908C6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8008ra-ul\\\\(ep\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F81F9209-8815-42D4-BFEB-CFF61742340A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8008ra-ula:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C3C87066-8147-4F24-B42F-3AA642539EAC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8008ra-ulk:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"96C34DBA-C38A-4C0E-9873-35273FCA2B89\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8008t-q:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"44B80FDF-9A59-4A0B-8B98-8DA4EB7FA257\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8009s-ula-v2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9912342C-C987-4383-BBC4-F7CD391E6897\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8010s-kl-v2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1E6CE06E-A5FB-44F7-97B8-B579BB4E5B6B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8016r-ul:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B3C2E444-62F1-4D39-AE61-E82C318C7347\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8016ra-k\\\\(ep\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"99C949B8-E81A-414D-9DB6-EB97010350D8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8016ra-ul:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AA5A2072-52C5-4186-9DB8-042AD216E2FE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8016ra-ul\\\\(ep\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2460B090-9D3A-4A0B-B038-C3BFEABD88C0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8016ra-ula:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5E615BDE-C711-42B4-9954-A79DCBB11AB0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8016ra-ulk:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"296C7021-3A42-49AE-BEF8-26B9E8903AEA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8016s-kl-v2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C0E9D5A7-140B-497D-ADD1-CD8D2477A1AE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8016s-ula-v2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"40288731-5E0B-4E82-8C7D-3FB7BE83EF5D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8016t-q-v2:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7E7FFF2-D519-45F3-9D3C-8B6FB6A32098\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8025r-ul:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DDC94459-C355-481D-8331-472CAFC42D06\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8032h4-p:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"26172745-675C-4FC0-82D5-9C4FCD93F4F5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8032h4-q:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DA73905F-6A39-4F5D-883E-62CC8ABFE5B1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8032h4-qe:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0BC88509-C0F5-4161-8DA4-5FE24B497A45\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8032h4-ul:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B81AB120-8714-4AEA-9C38-93EB139A6A66\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8032h8-p:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"69F75CB6-7622-405A-99A4-ADB220EA3EAC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8032h8-qe:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0B024D02-88FB-4DA4-8F17-E350B4DEE3E8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8032ra-ul-v2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"95DA638F-557A-4BA4-8156-59389D7F3422\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8064h8-p:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"05243495-342D-4289-AE53-05F49D056B5A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd80n16ra-kl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7733ACA2-FA42-4D8A-9682-E3C554011046\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd80n16ra-kl\\\\(ep\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0B3E4A71-6DD2-4177-B81F-C19058092328\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd80s08s-kl\\\\(ep\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F744DDBB-CAED-4C2B-BA3A-BFEE00442520\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd80s10s-kl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A638BCDE-5EC1-47BC-B6FC-0FCF63CCDF0A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd80s16s-kl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5AFF7005-BD5F-4D6F-BAD1-455F93178B7A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd80s16s-kl\\\\(ep\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D5004D3F-D60C-41AA-A7E1-78744B40279F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd80x09ra-kl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A65605B9-D522-4044-850E-C5D1C0341926\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd80x09s-kl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C7C80C7-00A4-4544-944B-8BF9BA4E0C3C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd88x09s-kl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A19CEBBB-B577-472F-91AC-1C9FDB78EEBE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8904r-pl:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D54F357-7141-4F3F-8C25-46E4D0862025\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8904r-yl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"679673F0-E191-4BF4-A30B-D69D3A198E1C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8904t-gsc-xpoe:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0BFEEECB-45B1-49E4-882C-08FF9B399129\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8904t-q:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D304BF7C-411C-4ADC-B46B-2D7F4C27DD13\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8908r-pl:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"46BA27CE-26B2-499A-AEA1-FD55AA8DE903\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8908r-yl:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D66DBEE8-F89F-43CC-BDFE-565B60445B15\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8908t-pl-xpoe:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AFFE8C98-26C1-4029-96A9-D2C84F9B747A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8908t-plc-xpoe:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7C1A9570-4F56-495A-89E5-1AE8FAA10991\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8916f4-q:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BC9C1DBA-C5D5-4214-B985-D0715F9D2894\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8916f8-q:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B80038C-54FD-41EE-B490-DDD02DF0F9F2\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:mbd6304t_firmware:4.02.r11.00000117.10001.131900.00000:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"012443C6-C00E-4B4D-B5DB-0496F54DB569\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:mbd6304t:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0EF9E45-B285-4219-8406-7D99281C4432\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd6808t-pl_firmware:4.02.r11.c7431119.12001.130000.00000:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5D1DFBB9-80E4-4A46-B641-18CACF2B73E8\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd6808t-pl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"15A8ED9A-0396-4E1B-9B1E-C739C399AD30\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd7004t-p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D54BEF10-16BD-4312-A64A-DA9804D8F87A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7004t-p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F54ADCA6-B370-44CF-B702-35AC9C1F1EE1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd7008t-p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7533F9B-3AFB-4F54-B52B-132190CD57D3\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7008t-p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F6377962-BF07-4888-809D-D0B2B7B42360\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd7016t-f-v2_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"96B3C8B9-CBE5-4D87-9DC9-211C0184C28A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7016t-f-v2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"94D2435A-B88A-40AE-B577-C260C0B84E5B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd7024h-p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6F611046-7AB2-447D-AC19-C98EF2B33A03\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7024h-p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"93F0B1FC-4945-4C01-93CD-7EB56970DDC9\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd7024t-p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"371819D2-5433-4AD1-9144-8E96FD98A74A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7024t-p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"17A02195-322A-4B15-9EC6-A58EE1038D6A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd7804r-f\\\\(ep\\\\)_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F33A6A5D-43F1-4976-9CA8-C0A5E62D6284\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7804r-f\\\\(ep\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1783A988-8902-4B2F-9F9F-C3A4383B9499\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd7804r-f\\\\(hdmi\\\\)_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4A7580AA-6E84-4A79-8181-2A31F83B013D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7804r-f\\\\(hdmi\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"97C80D93-FC96-429B-B741-D2C8B5D1253F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd7804r-fw_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B1C4B3E7-360B-4A84-BB04-06F67E092AFB\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7804r-fw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4952B6BD-13A9-4046-8A2D-94DF7F35A6BC\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd7804t-pl_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"535BF37C-B958-4727-BC36-D1C8B306385A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7804t-pl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FE82767D-F950-4060-BF73-309E5B20CC4C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd7808r-pl\\\\(ep\\\\)_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7614FE35-9847-4014-97AF-60264FA546F5\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7808r-pl\\\\(ep\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E258F796-EE67-4047-9E47-047FA0146698\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd7808r-pl\\\\(hdmi\\\\)_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6E25C9A8-1495-498A-9B6D-7F471EC485B4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7808r-pl\\\\(hdmi\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F7DA77C-1DBB-4CC1-962B-F949293D15A0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd7808t-pl_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"28273125-F656-4CAB-AE41-6EF6439E6949\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7808t-pl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"989A2402-587D-4498-8373-CBA744061FD4\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd7904r-fs_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"748CA397-54F7-4BFA-A5FD-1564BBE87DF7\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7904r-fs:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5878D6E1-9C80-43DF-A35C-050B24E09881\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd7904t-p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"579A7527-4525-418F-9C2E-C659556A3D1A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7904t-p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5929D0D2-E751-4234-99A5-C2F6A77A7036\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd7904t-pl_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"46C45062-6F1A-4180-8649-4F7A4E3C8492\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7904t-pl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B659DA2D-B179-4561-B9A9-7EE9F2F61E78\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd7904t-pl-xpoe_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3111C1BC-7233-4257-A547-40AF8A741438\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7904t-pl-xpoe:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"99C66DA3-46C3-494C-B3E0-2FC868CD1CB4\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd7904t-plc-xpoe_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E512E505-DAAE-416F-B2B8-449340C94DE4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7904t-plc-xpoe:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"26399E7B-C010-4AAB-918A-2CB442246D6B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd7904t-q_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD72DE5F-3433-48D2-A975-56B337EBA161\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7904t-q:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3E506F05-82D8-48B5-9099-CAAED859C0AB\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd7908t-q_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F50EB754-1BCD-4247-A959-EE571873F07B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd7908t-q:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E896E1E5-14CA-4F58-AE2A-0F44EF841CDB\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8004r-pl\\\\(ep\\\\)_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AD93E982-80FB-4E12-854C-D13E7923558A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8004r-pl\\\\(ep\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C23BE87B-247C-4283-97D4-0C22FDB66D7D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8004r-yl\\\\(ep\\\\)_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"04E4FAF4-1076-46F0-BF1E-5E6C93667E73\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8004r-yl\\\\(ep\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DAC2519C-904D-41C3-9646-9CE85FA28FAD\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8004t-q_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"57483428-D6E3-4F87-8812-DFCA49698D36\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8004t-q:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FD13F26C-7CB1-446D-8B04-B776D27FE2B1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8008r-pl_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A8466689-DA2D-4A9D-A837-279024BCAB32\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8008r-pl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1D20CEEA-FED7-49E8-8E34-80229E0E179F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8008r-pl\\\\(ep\\\\)_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5A3763DD-E509-4B6A-9A91-8B85FA62DD66\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8008r-pl\\\\(ep\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EA5AC1B2-87D7-47BE-A478-6CCDCF568EED\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8008r-yl\\\\(ep\\\\)_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A53C9829-F9DB-4CEC-9106-3C3312609B93\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8008r-yl\\\\(ep\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"938B76B6-A572-4C4C-A795-5A4F3B87A5D0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8008ra-gl_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4AF84FE3-FFA9-4581-8346-A8F0B5E7A5BC\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8008ra-gl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0EDA0E4D-9F90-4EC5-9379-FD455326E04D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8008ra-glk_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3E93EB04-5CE2-4F31-A43C-D5A042C29762\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8008ra-glk:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9CC8CACE-43B5-4F6A-AC88-17A2EFD908C6\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8008ra-ul\\\\(ep\\\\)_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D2F54FF3-A6B4-4679-A925-328BC57605FD\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8008ra-ul\\\\(ep\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F81F9209-8815-42D4-BFEB-CFF61742340A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8008ra-ula_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6A5735E0-18FF-4E83-AC8D-C995F0E471E7\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8008ra-ula:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C3C87066-8147-4F24-B42F-3AA642539EAC\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8008ra-ulk_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1C5E852C-9E89-423D-85BC-3959B5C1A9A6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8008ra-ulk:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"96C34DBA-C38A-4C0E-9873-35273FCA2B89\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8008t-q_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"455557A6-F707-41EC-A99B-906D0A0EF5C6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8008t-q:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CAD401DB-CE3A-4422-ABDE-6A34947B4171\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8009s-ula-v2_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2A1A15D-6F9B-4E47-8595-3740CD144C72\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8009s-ula-v2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9912342C-C987-4383-BBC4-F7CD391E6897\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8010s-kl-v2_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6775CAE0-E40E-4410-98DC-434F7A8785D9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8010s-kl-v2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1E6CE06E-A5FB-44F7-97B8-B579BB4E5B6B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8016r-ul_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8E5E1536-AD0D-47F3-B3D5-6A8F8373BBE0\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8016r-ul:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"446535F7-20EE-49E7-86BF-A04C2C429E73\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8016ra-k\\\\(ep\\\\)_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"086FDB62-5840-4A6C-B1B3-118ACE4F7F46\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8016ra-k\\\\(ep\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"99C949B8-E81A-414D-9DB6-EB97010350D8\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8016ra-ul_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FFF2883B-F704-438B-843D-CEB3DD3721FC\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8016ra-ul:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AA5A2072-52C5-4186-9DB8-042AD216E2FE\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8016ra-ul\\\\(ep\\\\)_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EC3CB0D4-68A9-494A-9D5B-9BEB25DCBE45\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8016ra-ul\\\\(ep\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2460B090-9D3A-4A0B-B038-C3BFEABD88C0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8016ra-ula_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A8E793F6-D0B4-4E38-8952-D6ED62900DBB\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8016ra-ula:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5E615BDE-C711-42B4-9954-A79DCBB11AB0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8016ra-ulk_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0EA31AC7-4FA8-4C8C-92BD-20309725E1E2\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8016ra-ulk:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"296C7021-3A42-49AE-BEF8-26B9E8903AEA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8016s-kl-v2_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7CD80F26-D083-44C3-8EAF-C38F3C5E18C4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8016s-kl-v2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C0E9D5A7-140B-497D-ADD1-CD8D2477A1AE\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8016s-ula-v2_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"22B21663-EEE5-40AE-9CD8-85984DD1AB05\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8016s-ula-v2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"40288731-5E0B-4E82-8C7D-3FB7BE83EF5D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8016t-q-v2_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AE276B72-CE33-43F3-A434-8B1B3AD894A3\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8016t-q-v2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9CB87CB1-393D-4289-AF4F-2C3E1E6D9CB3\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8025r-ul_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"888AF5D1-FC10-4780-B873-8B2EC36C7E79\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8025r-ul:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AD3EF5BE-64FB-4D2C-9F6C-538AF03F4669\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8032h4-p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7CCC851A-B9F2-4CC0-89B1-82AA0215A49A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8032h4-p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AAF701F9-E1E4-4301-B240-05C603DCD5CB\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8032h4-q_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B6DD5838-D0CA-4C2D-AED1-9F0E83F3A5C8\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8032h4-q:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BC971C99-52FF-4FFA-A886-6DACD4EC1C72\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8032h4-qe_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"16871FFD-7F23-4DC2-85A4-384E2DAD8D03\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8032h4-qe:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"00243889-A1A8-4FB9-B5BC-2F897FB52F67\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8032h4-ul_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BC9B9ED9-A9BA-4DBB-9A38-1BD73BF9A5A0\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8032h4-ul:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B81AB120-8714-4AEA-9C38-93EB139A6A66\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8032h8-p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B58C8E84-8FCB-43BD-B85D-FFF5908DD6BD\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8032h8-p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DDF54CC2-FA37-494B-BCE0-5D6890869626\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8032h8-qe_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A82F70B7-5F45-464A-80F2-C7325D99E16F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8032h8-qe:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"93DB3414-0B66-45C4-AFAB-12AF1E36C79D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8032ra-ul-v2_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"707F9E24-9B63-4EEF-BE90-755B61987C97\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8032ra-ul-v2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"95DA638F-557A-4BA4-8156-59389D7F3422\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8064h8-p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FB121909-85E3-414E-A82C-DF083C01E5A7\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8064h8-p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"34A6C270-B9B6-4391-BE8B-64CA74D4FE9C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd80n16ra-kl_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"22DA5543-B528-4830-863A-2856E99A67E5\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd80n16ra-kl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7733ACA2-FA42-4D8A-9682-E3C554011046\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd80n16ra-kl\\\\(ep\\\\)_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A0FB5521-610E-48A8-BFEF-2FAAD850E142\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd80n16ra-kl\\\\(ep\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0B3E4A71-6DD2-4177-B81F-C19058092328\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd80s08s-kl\\\\(ep\\\\)_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F1FCE6E-8AF9-45A3-83F0-F5150E3A2E01\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd80s08s-kl\\\\(ep\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F744DDBB-CAED-4C2B-BA3A-BFEE00442520\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd80s10s-kl_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FD76AA46-5087-491F-8291-46DEB75E2125\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd80s10s-kl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A638BCDE-5EC1-47BC-B6FC-0FCF63CCDF0A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd80s16s-kl_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"19353EFE-6D87-43AB-8209-CCDA2A95D0D6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd80s16s-kl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5AFF7005-BD5F-4D6F-BAD1-455F93178B7A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd80s16s-kl\\\\(ep\\\\)_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9CBEA872-1264-45FC-80F4-6240345B6A52\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd80s16s-kl\\\\(ep\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D5004D3F-D60C-41AA-A7E1-78744B40279F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd80x09ra-kl_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD4B0C2C-A269-442D-9E1E-B33913DF9642\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd80x09ra-kl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A65605B9-D522-4044-850E-C5D1C0341926\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd80x09s-kl_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6718AD9F-F17C-4EE7-806E-F807CE63BC02\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd80x09s-kl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C7C80C7-00A4-4544-944B-8BF9BA4E0C3C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd88x09s-kl_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9663392D-8AFD-4034-84CB-CA14365E7A61\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd88x09s-kl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A19CEBBB-B577-472F-91AC-1C9FDB78EEBE\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8904r-pl_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ECB5BDEA-3447-48C8-8676-E1B7CAF32BC1\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8904r-pl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B7F217A-26B9-4159-B221-701FBCC5ADA5\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8904r-yl_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1B9BDE0A-A196-4AF1-98D9-51DEDE05544C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8904r-yl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"679673F0-E191-4BF4-A30B-D69D3A198E1C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8904t-gsc-xpoe_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"593BBAAE-359B-445C-A8E4-E65C7A27A9C8\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8904t-gsc-xpoe:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0BFEEECB-45B1-49E4-882C-08FF9B399129\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8904t-q_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2E7ED836-F726-46CF-B5B2-95989C192EAD\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8904t-q:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"41D1EBCA-2439-4D53-BB4F-EE26EB2EC519\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8908r-pl_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0EBDFF26-4969-4E57-82E0-DD304FFD7618\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8908r-pl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0DBCF760-8F6A-4EE9-87AF-51D55C3E6CE5\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8908r-yl_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"042B0182-0875-4595-8026-C82FC80AF6BB\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8908r-yl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D84DA75-E531-4A99-8DFC-0A554263BDB0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8908t-pl-xpoe_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"82B208C8-6998-4962-AEAF-DCB9CCC2E4CA\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8908t-pl-xpoe:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AFFE8C98-26C1-4029-96A9-D2C84F9B747A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8908t-plc-xpoe_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B7FBE7D-3414-4505-8647-4DF136722857\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8908t-plc-xpoe:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7C1A9570-4F56-495A-89E5-1AE8FAA10991\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8916f4-q_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"71AC275F-5BB0-4DDD-BFB0-89FA8B13F870\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8916f4-q:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA060742-700E-4059-82AC-22535B4C3A9D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xiongmaitech:nbd8916f8-q_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A6634430-B184-476A-B83D-9F4C877E4CE7\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:xiongmaitech:nbd8916f8-q:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"62E24BDC-7BF2-4B2D-8045-985BB61BB9A5\"}]}]}],\"references\":[{\"url\":\"https://vulncheck.com/blog/xiongmai-iot-exploitation\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Technical Description\",\"Third Party Advisory\"]},{\"url\":\"https://vulncheck.com/blog/xiongmai-iot-exploitation\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Technical Description\",\"Third Party Advisory\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://vulncheck.com/blog/xiongmai-iot-exploitation\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-03T14:01:31.484Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 8.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2022-45045\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-04-24T20:08:11.609360Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-78\", \"description\": \"CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-04-24T20:08:22.764Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"n/a\", \"product\": \"n/a\", \"versions\": [{\"status\": \"affected\", \"version\": \"n/a\"}]}], \"references\": [{\"url\": \"https://vulncheck.com/blog/xiongmai-iot-exploitation\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated attacker, possibly using the default admin:tlJwpbo6 credentials, can connect to port 34567 and execute arbitrary operating system commands via a crafted JSON file during an upgrade request. Since at least 2021, Xiongmai has applied patches to prevent attackers from using this mechanism to execute telnetd.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"text\", \"description\": \"n/a\"}]}], \"providerMetadata\": {\"orgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"shortName\": \"mitre\", \"dateUpdated\": \"2022-12-01T00:00:00.000Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2022-45045\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-04-24T20:09:06.565Z\", \"dateReserved\": \"2022-11-08T00:00:00.000Z\", \"assignerOrgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"datePublished\": \"2022-12-01T00:00:00.000Z\", \"assignerShortName\": \"mitre\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.