Quickly reviews products that work with DW.
Design tools.
Element Profiles
| Publication Date | Subject | Related Technical Bulletins | Summary | Relevant Product(s) | System Impact | Severity |
|---|---|---|---|---|---|---|
| Aug 20, 2026 | CVE-2020-11022 & CVE-2020-11023 jQuery XSS Vulnerability | https://support.digital-watchdog.com/hc/en-us/articles/52728868944532-08-20-2026-Known-Issue-CVE-2020-11022-CVE-2020-11023-jQuery-XSS-Vulnerability | A potential XSS vulnerability has been brough forward for VMAX recorders that use older versions of jQuery.
|
VMAX IP G4 Series, VMAX A1 G4 Series, VMAX IP Plus Series | This potential security concern has been noted in the past and developers have already implemented defenses against the relevant vulnerabilities. As a result, even though older jQuery components are still present, there are currently no exposed vectors through which an attacker could directly execute malicious scripts. Developers are actively developing a new web interface that removes jQuery dependency completely and is currently undergoing testing. New firmware versions that address security concerns, based on the existing jQuery interface, will continue to be provided until the new web platform is launched. |
Low |
| May 14, 2026 | Dirty Frag Lx Kernel Vulnerability Statement | https://support.digital-watchdog.com/hc/en-us/articles/49265212675092-05-14-2026-Technical-Bulletin-Dirty-Frag-Lx-Kernel-Vulnerability-Statement | DW is actively investigating the scope of impact across all its Linux products. By default, DW Blackjack Server hardware that runs on Linux-based operating systems is not affected by this vulnerability. However, if you have enabled any of the modules that are affected, you will need to disable them. |
DW Blackjack Linux Servers | Recommended Solution: Check if affected modules are loaded and disable/remove is discovered.
For more information on the underlying vulnerability, refer to the official Ubuntu security advisory at https://ubuntu.com/blog/dirty-frag-linux-vulnerability-fixes-available. |
Low |
| Aug 23, 2023 | DW Cloud Portal does not populate Systems | DW Cloud Issue Solution | Following a recent update to the DW Cloud service, users have reported an issue where the DW Cloud Portal will not populate DW Cloud-connected systems. |
DW Spectrum IPVMS, DW Cloud-connected systems | Recommended Solution: Clear the cache from your web browser, then close and re-open the browser.
Clearing cache Chrome: https://support.google.com/accounts/answer/32050?hl=en&co=GENIE.Platform%3DDesktop Clearing cache Microsoft Edge:
|
Low |
| Mar 21, 2023 | DW Spectrum Systems periodically lose connection with DW Cloud | https://digital-watchdog.zendesk.com/hc/en-us/articles/43285078163476-03-16-2023-Hotfix-Notes-DW-Spectrum-IPVMS-Hotfix-v5-0-0-36529 | Some DW Spectrum Systems may experience intermittent connection loss with DW Cloud. Issue possibly related to to token bearing authorization issues, 2FA or other authentication related impediments. |
DW Spectrum IPVMS, DW Cloud-connected systems |
|
Low |
| May 24, 2022 | Microsoft email services (Outlook, Office365, Hotmail) are not receiving DW Cloud verification emails | https://digital-watchdog.zendesk.com/hc/en-us/articles/43285266222356-05-24-2022-Technical-Bulletin-DW-Cloud-and-Microsoft-Email-Verification | DW Cloud email verifications are not being received by Microsoft-reliant email services such as Outlook, Office 365, and Hotmail. |
DW Spectrum® IPVMS, DW Cloud-connected systems |
|
Low |
| Jan 14, 2022 | VMAX IP Plus & VMAX A1 Plus PathFinder 2.0 firmware update interrupts Push Notifications for DW Mobile Plus | https://digital-watchdog.zendesk.com/hc/en-us/articles/43284379779860-01-14-2022-Technical-Bulletin-PathFinder-P2P-Service-Changes | The Push Notification feature of DW Mobile Plus (iOS/Android) no longer works after updating NVR/DVR firmware for PathFinder 2.0 service update |
VMAX® A1 Plus™ Series, VMAX® IP Plus™ Series, DW Mobile Plus (iOS & Android) | Recording management is unaffected, push notification fails |
Low |
| Dec 15, 2021 | CVE-2021-44228 notice of the Log4j zero-day exploit does not affect DW products | https://digital-watchdog.zendesk.com/hc/en-us/articles/43284659179412-12-15-2021-Technical-Bulletin-Log4j-Software-Vulnerability-Statement | Apache Software Foundation's discovery of the Log4Shell software vulnerability with Log4j scripting framework does not affect DW product security; DW Products use JavaScript (.JS) programming, which is NOT affected by this news. |
DW Spectrum® IPVMS, Blackjack® Series, VMAX® A1 Plus™ Series, VMAX® IP Plus™ Series, MEGApix® IP Cameras, Compressor™ encoder Series | No effect on DW Products; no fix/changes necessary. |
Unaffected |
| Dec 13, 2021 | DW Spectrum IPVMS uses JavaScript (JS) format and is unaffected by the Log4j exploit | https://digital-watchdog.zendesk.com/hc/en-us/articles/43284831375892-12-13-2021-Technical-Bulletin-Log4J-JAVA-Framework-Exploit-Concerns | Apache Software Foundation's discovery of the Log4Shell software vulnerability with Log4j scripting framework does not affect DW product security; DW Products use JavaScript (.JS) programming, which is NOT affected by this news. |
DW Spectrum® IPVMS | No effect on DW Products; no fix/changes necessary. |
Unaffected |
| Nov 09, 2021 | System watchdog timer causes constant auto-reboot cycle; Pathfinder (P2P) issues | https://digital-watchdog.zendesk.com/hc/en-us/articles/43284341969428-Known-Issue-Digital-Watchdog-VMAX-A1-Plus-Rebooting | DVR watchdog timer function experiences false-positive fault detection, locking DVR in a reboot cycle |
VMAX® A1 Plus Series (DW-VA1P4xT, DW-VA1P8xT, DW-VA1P16xT) | Critical impact; firmware patch available. |
Severe |
| May 28, 2021 | Updating OpenSSL file | https://digital-watchdog.zendesk.com/hc/en-us/articles/43284258728852-Known-Issue-DW-Spectrum-Software-Crashes-Due-to-libeay32-dll-on-Windows | DW Spectrum crashes immediately after launching due to outdated OpenSSL file "libeay32.dll". |
DW Spectrum IPVMS | Critical impact; fix available. |
Severe |
| May 27, 2021 | Enabling plain-text for SMTP notification videos | https://digital-watchdog.zendesk.com/hc/en-us/articles/43285124996628-Known-Issue-Pre-Alarm-Clips-Do-Not-Display-in-Email-Notifications-DW-Spectrum | Pre-alarm video clips do not display images properly when sent over SMTP. |
DW Spectrum® IPVMS | Operation is unaffected, email notification video fails; fix available. |
Low |
| Apr 27, 2021 | BIOS error code | https://digital-watchdog.zendesk.com/hc/en-us/articles/43284527780884-Known-Issue-BIOS-Recovery-Issue-For-DW-Blackjack-E-RACK-X9SAE1 | SuperMicro X9 motherboards with E3v1/v2 CPUs no longer allow system administrators to access BIOS |
Blackjack E-Rack™ Series (DW-BJER2U, DW-BJER3U, DW-BJER4U) | Operation is interrupted; fix available. |
Low |
| Feb 09, 2021 | NAS invalid storage | https://digital-watchdog.zendesk.com/hc/en-us/articles/43284827932948-Known-Issue-NAS-Storage-Becomes-Unavailable-and-Shows-As-Invalid-Storage-Windows-OS | When both the DW Spectrum Server and the Samba NAS have the same workgroup name, the NAS device will show as invalid storage for DW Spectrum. |
DW Spectrum® IPVMS, Blackjack® NAS Series | Archive storage is affected; fix available. |
Low |
| Feb 02, 2021 | Third-Party cameras fail to obtain onvif/media2 packets properly | https://digital-watchdog.zendesk.com/hc/en-us/articles/43284550821908-Third-Party-Cameras-Go-Offline-After-DW-Spectrum-Update-v4-1 | DW Spectrum experiences video loss with third-party cameras due to differing ONVIF API between the server and camera. |
DW Spectrum IPVMS | Operation is interrupted; fix and software patch available. |
Low |
| Jan 11, 2021 | System time inaccuracy | https://digital-watchdog.zendesk.com/hc/en-us/articles/43284359618964-Known-Issue-VMAX-Legacy-DVR-Date-Issue | At the start of January 1st, 2021, the internal settings of legacy VMAX units inaccurately displayed "2020" as the year. |
DW-VMAX, DW-VF, DW-VF960H, DW-VC, DW-VMAX960H, DW-VMAX480 | Time records affected; outdated/discontinued product. |
Low |
| Oct 01, 2019 | Outdated security certificate results in error message on Win10 and WinServer2016 | https://digital-watchdog.zendesk.com/hc/en-us/articles/43286420197012--Archive-Known-Issue-Windows-will-not-allow-me-to-run-or-install-DW-Spectrum | Using DW Spectrum on Windows 10 or Windows Server 2016 systems results in a security certificate error. |
DW Spectrum® IPVMS v3.2 | Critical impact; software update available. |
Severe |
| Aug 24, 2019 | Windows KB4512506 causes OS boot issues for Win7 embedded DW Blackjack units | https://digital-watchdog.zendesk.com/hc/en-us/articles/43283985610004-Known-Issue-Windows-7-Boot-Issue-KB4512506 | DW Blackjack servers with embedded Win7 OS does not boot after Windows Monthly Rollup Update KB4512506 (August 2019). |
Blackjack® servers with Windows OS | Critical impact; fix available. |
Moderate |