Unpatched Vulnerability in TBK Digital Video Recording Devices Exploited by Hackers

Fortinet FortiGuard Labs has issued an advisory stating that a critical authentication bypass flaw, known as CVE-2018-9995, impacting TBK digital video recording (DVR) devices is being exploited by threat actors. The vulnerability allows remote actors to gain elevated permissions, potentially leading to access to camera video feeds, due to an error in handling a maliciously crafted HTTP cookie.