ACTIVELY EXPLOITED VULNERABILITY IN HITRON DVRS: FIXED, PATCHES AVAILABLE

Summary from the TLDR InfoSec newsletter

The Akamai Security Intelligence Response Team (SIRT) has discovered vulnerabilities in multiple Hitron DVR device models that are actively being exploited. The vulnerabilities allow an authenticated attacker to achieve OS command injection using default credentials. Hitron Systems has released new firmware versions to address the vulnerabilities and advises users to upgrade to firmware version ≥ 4.03.