> For the complete documentation index, see [llms.txt](https://team-envy.gitbook.io/team.envy/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://team-envy.gitbook.io/team.envy/readme.md).

# Introduction

We have been conducting vulnerability analysis on NVR over the past three months.

We analyzed vulnerabilities in Hikvision, Dahua, VendorV, and Synology, identifying weaknesses within OEM products associated with Hikvision and Dahua.

This document explains what we did and describes the entire methodology from firmware acquisition to vulnerability analysis.

Some content has been kept confidential in accordance with the vulnerability disclosure policy and the vendor's request.

For any inquiries, please contact us at `nvr.bob12@gmail.com`.

## Released Vulnerabilities

<table data-full-width="false"><thead><tr><th width="200" align="center">Vendor</th><th width="259" align="center">CVE ID</th><th width="131.50000000000003" align="center">CVSS</th><th align="center">Reference</th></tr></thead><tbody><tr><td align="center">Hikvision</td><td align="center">CVE-2023-28812</td><td align="center">9.1</td><td align="center"><a href="https://nvd.nist.gov/vuln/detail/CVE-2023-28812">NVD</a></td></tr><tr><td align="center">Hikvision</td><td align="center">CVE-2023-28813</td><td align="center">8.1</td><td align="center"><a href="https://nvd.nist.gov/vuln/detail/CVE-2023-28813">NVD</a></td></tr><tr><td align="center">Hikvision</td><td align="center">CVE-2024-29947</td><td align="center">2.7</td><td align="center"><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-29947">NVD</a></td></tr><tr><td align="center">Hikvision</td><td align="center">CVE-2024-29948</td><td align="center">3.8</td><td align="center"><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-29948">NVD</a></td></tr><tr><td align="center">Hikvision</td><td align="center">CVE-2024-29949</td><td align="center">7.2</td><td align="center"><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-29949">NVD</a></td></tr><tr><td align="center">Synology</td><td align="center">CVE-2024-29228</td><td align="center">7.7</td><td align="center"><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-29228">NVD</a></td></tr><tr><td align="center">Synology</td><td align="center">CVE-2024-29229</td><td align="center">7.7</td><td align="center"><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-29229">NVD</a></td></tr><tr><td align="center">Synology</td><td align="center">CVE-2024-29241</td><td align="center">9.9</td><td align="center"><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-29241">NVD</a></td></tr><tr><td align="center">Synology</td><td align="center">CVE-2024-29227</td><td align="center">5.4</td><td align="center"><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-29227">NVD</a></td></tr><tr><td align="center">Synology</td><td align="center">CVE-2024-29230</td><td align="center">5.4</td><td align="center"><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-29230">NVD</a></td></tr><tr><td align="center">Synology</td><td align="center">CVE-2024-29231</td><td align="center">5.4</td><td align="center"><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-29231">NVD</a></td></tr><tr><td align="center">Synology</td><td align="center">CVE-2024-29232</td><td align="center">5.4</td><td align="center"><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-29232">NVD</a></td></tr><tr><td align="center">Synology</td><td align="center">CVE-2024-29233</td><td align="center">5.4</td><td align="center"><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-29233">NVD</a></td></tr><tr><td align="center">Synology</td><td align="center">CVE-2024-29234</td><td align="center">5.4</td><td align="center"><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-29234">NVD</a></td></tr><tr><td align="center">Synology</td><td align="center">CVE-2024-29235</td><td align="center">5.4</td><td align="center"><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-29235">NVD</a></td></tr><tr><td align="center">Synology</td><td align="center">CVE-2024-29236</td><td align="center">5.4</td><td align="center"><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-29236">NVD</a></td></tr><tr><td align="center">Synology</td><td align="center">CVE-2024-29237</td><td align="center">5.4</td><td align="center"><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-29237">NVD</a></td></tr><tr><td align="center">Synology</td><td align="center">CVE-2024-29238</td><td align="center">5.4</td><td align="center"><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-29238">NVD</a></td></tr><tr><td align="center">Synology</td><td align="center">CVE-2024-29239</td><td align="center">5.4</td><td align="center"><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-29239">NVD</a></td></tr><tr><td align="center">Synology</td><td align="center">CVE-2024-29240</td><td align="center">4.3</td><td align="center"><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-29240">NVD</a></td></tr></tbody></table>