{"id":"CVE-2026-100737","title":"Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd","summary":"Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may upgrade the affected product to unauthorized fir…","severity":"medium","cvss":4.9,"cvssVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","cvssSource":"cna","cwe":["CWE-912"],"vendor":"Atsumi Electric Co., Ltd.","product":"ADX5004","affected":["ADX5004 < Ver.10.8.237","ADX5008 < Ver.10.8.237","ADX404 < Ver.10.8.237","ADX3004 < Ver.10.8.237","ADX3008 < Ver.10.8.237","ADX3016 < Ver.10.8.237","ADX204 < Ver.10.8.237","ADX1004 all versions","ADX1008 all versions","ADX2016 all versions"],"published":"2026-10-20","updated":"2026-10-20","sourceUpdated":"2026-10-20T05:28:36.790Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-100737","references":[{"url":"https://www.atsumi.co.jp/info-20261005.html"},{"url":"https://jvn.jp/en/jp/JVN88864366/"}],"tags":["cve.org"],"ingestedAt":"2026-10-20T05:53:39.302Z","slug":"CVE-2026-100737","body":"## Overview\n\nHidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may upgrade the affected product to unauthorized firmware.\n\n## Affected\n\n- `ADX5004 < Ver.10.8.237`\n- `ADX5008 < Ver.10.8.237`\n- `ADX404 < Ver.10.8.237`\n- `ADX3004 < Ver.10.8.237`\n- `ADX3008 < Ver.10.8.237`\n- `ADX3016 < Ver.10.8.237`\n- `ADX204 < Ver.10.8.237`\n- `ADX1004 all versions`\n- `ADX1008 all versions`\n- `ADX2016 all versions`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":27,"depthScoreParts":{"impact":27,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}