LeakIX - Host 116.108.82.72

Host 116.108.82.72

Vietnam

Viettel Group

Software information

webserver

tcp/443

Vulnerable HiSilicon family DVR

This vulnerability (with proof of concept (PoC) code) affects DVR/NVR devices built using the HiSilicon hi3520d and similar system on a chip (SoC).

Exploiting the vulnerabilities lead to unauthorized remote code execution (RCE) using only the web interface, causing full takeover of the exploited device

IP: 116.108.82.72
Port: 83
URL: http://116.108.82.72:83

First seen 2023-07-18 06:08
- Severity: high
  Fingerprint: 321975614123c6c05f83e99b716de2ea31faf3db31faf3db31faf3db31faf3db
```
Found HiSiliconDVR firmware:
Hardware: General AHB7804R-MS
Vulnerable to multiple issues : LFI, possibly RCE
```
  Found on 2023-07-18 06:08
Create report

Open service 116.108.82.72:443

2024-06-02 18:19

HTTP/1.1 200 OK
Date: Mon, 03 Jun 2024 01:21:54 GMT
Server: webserver
X-Frame-Options: SAMEORIGIN
ETag: "574-258-62f3ca30"
Content-Length: 600
Content-Type: text/html
Connection: close
Last-Modified: Wed, 10 Aug 2022 15:09:36 GMT


<!doctype html>
<html>
<head>
	<title></title>
	<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
	<meta http-equiv="X-UA-Compatible" content="IE=edge" >
	<meta http-equiv="Pragma" content="no-cache" />
	<meta http-equiv="Cache-Control" content="no-cache, must-revalidate" />
	<meta http-equiv="Expires" content="0" />
    <!-- 去除edge下将数字处理成电话的错误 -->
    <meta name="format-detection" content="telephone=no">
</head>
<body>
</body>
<script>
	window.location.href = "/doc/page/login.asp?_" + (new Date()).getTime();
</script>
</html>

Found 2024-06-02 by HttpPlugin

Create report

Fingerprint:

902201741b52792aa68d02603c71d13dfa38585596fcbcd2d9e2a2655f51bd46

CN:

417302a3600e47e5efbffd28f42f7953

Key:

RSA-1024

Issuer:

417302a3600e47e5efbffd28f42f7953

Not before:

2023-12-22 07:29

Not after:

2026-12-21 07:29

Domain summary

No record

Host 116.108.82.72

Vietnam

Software information

Vulnerable HiSilicon family DVR

Create report

Domain summary