CVE-2026-97627
Received
Received - Intake
Arbitrary OS Command Execution in Atsumi Electric DVR
Vulnerability report for CVE-2026-97627, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-20
Last updated on: 2026-10-20
Assigner: JPCERT/CC
Description
Description
Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may execute arbitrary OS commands.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Atsumi | Electric | Co., Ltd. ADX5004 0 |
| Atsumi | Electric | Co., Ltd. ADX5008 0 |
| Atsumi | Electric | Co., Ltd. ADX404 0 |
| Atsumi | Electric | Co., Ltd. ADX3004 0 |
| Atsumi | Electric | Co., Ltd. ADX3008 0 |
| Atsumi | Electric | Co., Ltd. ADX3016 0 |
| Atsumi | Electric | Co., Ltd. ADX204 0 |
| Atsumi | Electric | Co., Ltd. ADX1004 all versions |
| Atsumi | Electric | Co., Ltd. ADX1008 all versions |
| Atsumi | Electric | Co., Ltd. ADX2016 all versions |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-912 | The product contains functionality that is not documented, not part of the specification, and not accessible through an interface or command sequence that is obvious to the product's users or administrators. |
