OTPulse

Digital Watchdog VMAX DVR and NVR Product Lineups

Plan PatchCVSS 9.6ICS-CERT ICSA-26-258-01Sep 15, 2026
Attack path
Attack VectorAdjacent
Auth RequiredNone
ComplexityLow
User InteractionNone needed
Summary

Multiple authentication and authorization vulnerabilities (CWE-306, CWE-798, CWE-862, CWE-337) affect the Digital Watchdog VMAX product line DVRs and NVRs across all current versions. Successful exploitation grants full administrative control, allowing attackers to view live and recorded surveillance footage, modify device configurations, and pivot to other network systems. The vulnerability requires network adjacency (same subnet or VPN connection) but no valid credentials. Digital Watchdog has released updated firmware as mitigation.

What this means
What could happen
An attacker gaining administrative control could view all live and recorded surveillance footage, modify device settings, and use the recorder as a pivot point to attack other systems on your network.
Who's at risk
This affects water authorities and utilities using Digital Watchdog VMAX surveillance recorders (DVRs and NVRs) for physical security monitoring. Any facility relying on these devices for camera surveillance and event recording should be concerned.
How it could be exploited
The vulnerability requires adjacency to the network (AV:A per CVSS), meaning an attacker must be on the same local network segment or connected via VPN. Once on the network, they can exploit the lack of proper authentication controls to gain full admin access to the VMAX device without needing valid credentials.
Prerequisites
  • Network access to the VMAX device from the same local network segment or VPN connection
  • No valid user credentials required
remotely exploitableno authentication requiredlow complexityaffects safety systemsnetwork pivot capability
Exploitability
Unlikely to be exploited — EPSS score 0.6%
Affected products (5)
5 pending
ProductAffected VersionsFix Status
VMAX A1 G4 DVRsAll versionsNo fix yet
VMAX IP G4 NVRsAll versionsNo fix yet
VMAX A1 PLUSAll versionsNo fix yet
VA1G4 RecorderAll versionsNo fix yet
VG4 RecorderAll versionsNo fix yet
Remediation & Mitigation
0/3
Do now
0/1
HARDENINGImplement firewall rules to restrict network access to VMAX devices to only authorized management workstations and monitoring systems
Schedule — requires maintenance window
0/1

Patching may require device reboot — plan for process interruption

VMAX A1 G4 DVRs
HOTFIXUpdate firmware on all VMAX A1 G4 DVRs, VMAX IP G4 NVRs, VMAX A1 PLUS, VA1G4 Recorders, and VG4 Recorders from https://digital-watchdog.com/downloads/
Long-term hardening
0/1
HARDENINGIsolate VMAX recorders on a dedicated surveillance network segment with restricted access from general IT networks and remote access points
View full CISA ICS-CERT advisory
API: /api/v1/advisories/cafa8b4a-a67b-4cc7-ba7f-680928ad928f

Get OTPulse briefings by email

Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.

Digital Watchdog VMAX DVR and NVR Product Lineups | CVSS 9.6 - OTPulse