Our takeCISA reports active exploitation in Digital Watchdog VMAX DVR and NVR lines (all A1 G4 versions). If you run these, update immediately; attackers can gain full admin access, view footage, change configs, and pivot.Cyber Resilience desk
Sources (1)
- cisa_ics · cisa_ics
What this means for you — Security leader:CISA reports active exploitation in Digital Watchdog VMAX DVR and NVR product lineups (all VMAX A1 G4 versions affected). Update immediately or isolate the devices from the network; they can be used for full admin access, video theft, and pivoting.
What this means for you — Lean IT orgs:If you use Digital Watchdog VMAX DVR or NVR systems, check the model and version today. Update the firmware right away or disconnect the devices from the internet until you can.
What this means for you — MSP:Audit client environments for any Digital Watchdog VMAX DVR or NVR deployments (A1 G4 and related). Prioritize patching or network isolation; these are confirmed exploitable for full device takeover and lateral movement.
What this means for you — Researcher:CISA advisory ICSA-26-258-01 details confirmed exploitation in Digital Watchdog VMAX DVR/NVR (all VMAX A1 G4 versions). Full admin control, video access, config changes, and network pivoting are the risks.