Hidden Functionality Vulnerability in Multiple DVRs by Atsumi Electric
CVE-2026-100737

6.9MEDIUM

Key Information:

Vendor

Atsumi Electric Co., Ltd.

Status
Adx5004
Adx5008
Adx404
Adx3004
Vendor
CVE Published:
20 October 2026

What is CVE-2026-100737?

A significant vulnerability has been identified in multiple Digital Video Recorders (DVRs) by Atsumi Electric Co., Ltd. This issue stems from hidden functionality that allows an authenticated user with administrator privileges to upgrade the device to unauthorized firmware versions. This condition can lead to potential unauthorized access and manipulation of the DVR system, posing a severe risk to user data and device integrity.

Affected Version(s)

ADX1004 all versions

ADX1008 all versions

ADX2016 all versions

References

https://www.atsumi.co.jp/info-20261005.html
https://jvn.jp/en/jp/JVN88864366/

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

CVSS V3.0

Score:
4.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.