CVE-2024-22772

CVE-2024-22772 describes an improper input validation vulnerability in Hitron Systems DVR LGUVR-8H firmware versions 1.02 through 4.02. This flaw allows an unauthenticated attacker to launch network attacks if the default administrator credentials are still in use. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network with low complexity, potentially leading to a complete denial of service. While no public exploit code or Metasploit modules are available, there is evidence of active exploitation by the InfectedSlurs botnet, as reported by SecurityWeek, indicating real-world risk despite low community discussion.