{"id":"CVE-2026-97627","title":"Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd","summary":"Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may execute arbitrary OS commands.","severity":"high","cvss":7.2,"cvssVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-912"],"vendor":"Atsumi Electric Co., Ltd.","product":"ADX5004","affected":["ADX5004 < Ver.10.8.237","ADX5008 < Ver.10.8.237","ADX404 < Ver.10.8.237","ADX3004 < Ver.10.8.237","ADX3008 < Ver.10.8.237","ADX3016 < Ver.10.8.237","ADX204 < Ver.10.8.237","ADX1004 all versions","ADX1008 all versions","ADX2016 all versions"],"published":"2026-10-20","updated":"2026-10-20","sourceUpdated":"2026-10-20T05:28:49.312Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-97627","references":[{"url":"https://www.atsumi.co.jp/info-20261005.html"},{"url":"https://jvn.jp/en/jp/JVN88864366/"}],"tags":["cve.org"],"ingestedAt":"2026-10-20T05:53:39.301Z","slug":"CVE-2026-97627","body":"## Overview\n\nHidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may execute arbitrary OS commands.\n\n## Affected\n\n- `ADX5004 < Ver.10.8.237`\n- `ADX5008 < Ver.10.8.237`\n- `ADX404 < Ver.10.8.237`\n- `ADX3004 < Ver.10.8.237`\n- `ADX3008 < Ver.10.8.237`\n- `ADX3016 < Ver.10.8.237`\n- `ADX204 < Ver.10.8.237`\n- `ADX1004 all versions`\n- `ADX1008 all versions`\n- `ADX2016 all versions`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":39.6,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}