Hackers Exploiting 5-year-old Unpatched Vulnerability in TBK DVR Devices

Threat actors are actively exploiting an unpatched five-year-old flaw impacting TBK digital video recording (DVR) devices, according to an advisory issued by Fortinet FortiGuard Labs.
The vulnerability in question is CVE-2018-9995 (CVSS score: 9.8), a critical authentication bypass issue that could be exploited by remote actors to gain elevated permissions.
"The 5-year-old vulnerability (

advisory authentication authentication bypass bypass critical cve cve-2018-9995 cvss devices digital dvr exploited exploiting flaw fortinet fortinet fortiguard labs hackers issue labs old permissions question recording score tbk dvr threat threat actors unpatched video vulnerability