Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2026-100737 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may upgrade the affected product to unauthorized firmware.

Metrics

CVSS 3.x Severity and Vector Strings:

VolerionCVSS-B:4.5 MEDIUMVector:CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

CNA: [email protected]CVSS-B:4.9 MEDIUMVector:CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://jvn.jp/en/jp/JVN88864366/	[email protected]	AdvisoryBundleRemedy
https://www.atsumi.co.jp/info-20261005.html	[email protected]	AdvisoryRemedyVendor

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-912	Hidden Functionality	[email protected]

Affected Products

Product	Versions
Atsumi Electric ADX5004	< 10.8.237 (semver)
CPE No CPEs found in CPE dictionary for this product. Remediation Upgrade: 10.8.237moderate efforthttps://www.atsumi.co.jp/dlsingle/firmware/1069
Atsumi Electric ADX5008	< 10.8.237 (semver)
CPE No CPEs found in CPE dictionary for this product. Remediation Upgrade: 10.8.237moderate efforthttps://www.atsumi.co.jp/dlsingle/firmware/1093
Atsumi Electric ADX404	< 10.8.237 (semver)
CPE No CPEs found in CPE dictionary for this product. Remediation Upgrade: 10.8.237moderate efforthttps://www.atsumi.co.jp/dlsingle/firmware/1094
Atsumi Electric ADX3004	< 10.8.237 (semver)
CPE No CPEs found in CPE dictionary for this product. Remediation Upgrade: 10.8.237moderate efforthttps://www.atsumi.co.jp/dlsingle/firmware/906
Atsumi Electric ADX3008	< 10.8.237 (semver)
CPE No CPEs found in CPE dictionary for this product. Remediation Upgrade: 10.8.237moderate efforthttps://www.atsumi.co.jp/dlsingle/firmware/907
Atsumi Electric ADX3016	< 10.8.237 (semver)
CPE No CPEs found in CPE dictionary for this product. Remediation Upgrade: 10.8.237moderate efforthttps://www.atsumi.co.jp/dlsingle/firmware/905
Atsumi Electric ADX204	< 10.8.237 (semver)
CPE No CPEs found in CPE dictionary for this product. Remediation Upgrade: 10.8.237moderate efforthttps://www.atsumi.co.jp/dlsingle/firmware/880
Atsumi Electric ADX1004	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation Mitigation:low effort Disconnect the DVR from the network if remote access is not required. Mitigation:low effort Consider replacing the product with a successor model if remote access is necessary.
Atsumi Electric ADX1008	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation Mitigation:low effort Disconnect the DVR from the network if remote access is not required. Mitigation:low effort Consider replacing the product with a successor model if remote access is necessary.
Atsumi Electric ADX2016	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation Mitigation:low effort Disconnect the DVR from the network if remote access is not required. Mitigation:low effort Consider replacing the product with a successor model if remote access is necessary.

Change History

2 change records found show changes

Date	Action	Recorded By
Oct 20, 2026	CVE Modified	CISA-ADP
Oct 20, 2026	New CVE Received	[email protected]

CVE-2026-100737 Details

ANALYZED

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO