CVE-2026-100737
Full vulnerability record from the local CVENow database.
Description
Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may upgrade the affected product to unauthorized firmware.
Severity
MEDIUM
CVSS score
6.9
(v4.0)
Vulnerability status
Deferred
Source identifier
Published
2026-10-20 06:16:56.477000
Last modified
2026-10-20 20:17:11.360000
View original CVE JSON
{
"id": "CVE-2026-100737",
"sourceIdentifier": "[email protected]",
"published": "2026-10-20T06:16:56.477",
"lastModified": "2026-10-20T20:17:11.360",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may upgrade the affected product to unauthorized firmware."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Atsumi Electric Co., Ltd.",
"product": "ADX5004",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThan": "Ver.10.8.237",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Atsumi Electric Co., Ltd.",
"product": "ADX5008",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThan": "Ver.10.8.237",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Atsumi Electric Co., Ltd.",
"product": "ADX404",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThan": "Ver.10.8.237",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Atsumi Electric Co., Ltd.",
"product": "ADX3004",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThan": "Ver.10.8.237",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Atsumi Electric Co., Ltd.",
"product": "ADX3008",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThan": "Ver.10.8.237",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Atsumi Electric Co., Ltd.",
"product": "ADX3016",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThan": "Ver.10.8.237",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Atsumi Electric Co., Ltd.",
"product": "ADX204",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThan": "Ver.10.8.237",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Atsumi Electric Co., Ltd.",
"product": "ADX1004",
"versions": [
{
"version": "all versions",
"status": "affected"
}
]
},
{
"vendor": "Atsumi Electric Co., Ltd.",
"product": "ADX1008",
"versions": [
{
"version": "all versions",
"status": "affected"
}
]
},
{
"vendor": "Atsumi Electric Co., Ltd.",
"product": "ADX2016",
"versions": [
{
"version": "all versions",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV30": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.0",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.2,
"impactScore": 3.6
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-10-20T19:15:26.313735Z",
"id": "CVE-2026-100737",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-912"
}
]
}
],
"references": [
{
"url": "https://jvn.jp/en/jp/JVN88864366/",
"source": "[email protected]"
},
{
"url": "https://www.atsumi.co.jp/info-20261005.html",
"source": "[email protected]"
}
]
}