{"apiVersion":"1","notice":"Security Threat Pulse API v1. Free, no key. Facts with sources; verdicts follow the published rules at https://securitythreatpulse.com/methodology. Not advice. Some source data is withheld here until its terms allow re-serving.","generatedAt":"2026-11-11T08:30:32.797Z","products":["tbk"],"actNowTotal":0,"results":[{"query":"tbk","matched":1,"actNow":0,"events":[{"id":"early-cve-2024-3721","url":"https://securitythreatpulse.com/events/early-cve-2024-3721","title":"TBK DVR-4104: attackers can run commands on it","verdict":"watch","verdictReason":"Attacks are reported but not confirmed by an authoritative source, and the vulnerability is more than 90 days old.","tier":null,"rankScore":2,"rankWhy":["Exploitation is reported.","The first report is 19 days old."],"rulesVersion":"v3","ladder":{"talk":"none","damage":"none","attempts":"confirmed","exposure":"none","exploited":"reported"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2024-3721"],"vendor":"TBK","product":"DVR-4104","affectedProducts":[{"kind":"direct","slug":"tbk/dvr4104","vendor":"TBK","product":"DVR-4104","evidence":["cna","cpe"],"vendorKey":"tbk","productKey":"dvr4104"},{"kind":"direct","slug":"tbk/dvr4216","vendor":"Tbk","product":"Dvr-4216","evidence":["cpe"],"vendorKey":"tbk","productKey":"dvr4216"}],"category":{"id":"network-device","label":"Routers, cameras and devices","why":"Routers, cameras and recorders are often forgotten and rarely updated.","doThis":"Update it or replace it. Never leave its admin page open to the internet."},"summary":"A vulnerability was found in TBK DVR-4104 and DVR-4216 up to 20240412 and classified as critical. This issue affects some unknown processing of the file /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___. The manipulation of the argument mdb/mdc leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.","cvss":6.3,"epss":0.86489,"exploitMaturity":"poc","kevListed":false,"kevDateAdded":null,"kevDueDate":null,"firstSeenAt":"2026-10-23T00:00:00.000Z","updatedAt":"2026-11-11T00:00:06.173Z","newestEvidenceAt":"2026-11-07T16:35:07.997Z"}]}]}