LeakIX - Host 122.117.153.208

Host 122.117.153.208

Taiwan

Data Communication Business Group

Vulnerable HiSilicon family DVR

This vulnerability (with proof of concept (PoC) code) affects DVR/NVR devices built using the HiSilicon hi3520d and similar system on a chip (SoC).

Exploiting the vulnerabilities lead to unauthorized remote code execution (RCE) using only the web interface, causing full takeover of the exploited device

IP: 122.117.153.208
Port: 85
URL: http://122.117.153.208:85

First seen 2023-01-31 13:38
Last seen 2024-10-05 21:00
Open for 613 days
- Severity: high
  Fingerprint: 321975614123c6c05f83e99b74b6d9e701d3b64c01d3b64c01d3b64c01d3b64c
```
Found HiSiliconDVR firmware:
Hardware: General AHB7004T-MHV2
Vulnerable to multiple issues : LFI, possibly RCE
```
  Found on 2024-10-05 21:00
Create report

2024-10-01 21:14

HTTP/1.0 200 OK
Content-type: text/html
Server: uc-httpd 1.0.0
Expires: 0

Page title: NETSurveillance WEB

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <link rel="stylesheet" type="text/css" media="screen" href="m.css" />
    
    <title>NETSurveillance WEB</title>
    
    <!-- m.js -->

    <script type="text/javascript" language="JavaScript">
	 var bCrossBrow=false;
	 var bnpCheck = false;
var ShowTipFlag=2;
	// var SupportFind=false;
	if(navigator.userAgent.indexOf('IE') < 0)
	{
		if(navigator.platform != "Win32")
		{
			location="Login.htm";
		}
		var userAgent = navigator.userAgent,   
                rMsie = /(msie\s|trident.*rv:)([\w.]+)/,   
                rFirefox = /(firefox)\/([\w.]+)/,   
                rOpera = /(opera).+version\/([\w.]+)/,   
                rChrome = /(chrome)\/([\w.]+)/,   
                rSafari = /version\/([\w.]+).*(safari)/;
		var browserMatch = uaMatch(userAgent.toLowerCase());
		 
		if(browserMatch.browser!="IE")
		{
		    // location="Login.htm";
			 bCrossBrow=true;
			 	}
		
	}
	
	function reminder()
	{
		var nSel=$('langlist').selectedIndex;
		var cLanguage;
		switch(nSel)
		{
		case 0:
             cLanguage="English";
            
             break;
		case 1:
             cLanguage="French";
            
             break;
		case 2:
             cLanguage="Hungarian";
            
             break;
		case 3:
             cLanguage="Italian";
            
             break;
		case 4:
             cLanguage="Japanese";
             
             break;
		case 5:
             cLanguage="Portugal";
            
             break;
		case 6:
             cLanguage="Russian";
             
             break;
		case 7:
             cLanguage="SimpChinese";
            
             break;
		case 8:
             cLanguage="Spanish";
            
             break;
		case 9:
             cLanguage="TradChinese";
             
             break;
		case 10:
             cLanguage="German";
            
             break;
		case 11:
             cLanguage="Poland";
            
             break;
		case 12:
             cLanguage="Turkey";
           
             break;
		case 13:
             cLanguage="Romanian";
             break;
		case 14:
             cLanguage="Suomi";
             break;
		case 15:
             cLanguage="Korean";
             break;
		case 16:
             cLanguage="Farsi";
             break;
		case 17:
             cLanguage="Thai";
             break;
		case 18:
             cLanguage="Greek";
             break;
		case 19:
             cLanguage="Vietnamese";
             break;
		case 20:
             cLanguage="Brazilian";
             break;
		case 21:
             cLanguage="Hebrew";
             break;
		case 22:
             cLanguage="Arabic";  
             break;  
		case 23:
             cLanguage="Bulgarian";  
             break; 
		case 24:
      		 cLanguage="Czech";  
             break;
		default:
             cLanguage="English";
             break;   
		}			 
		if(2==ShowTipFlag)
		{
			switch(nSel) 
			{
				case 0:
					cLanguage="English";
					alert("Please set the encrypted problem!");
					break;
				case 7:
					cLanguage="SimpChinese";
					alert("请先设置密保问题!");   
					break;  
				default:
					cLanguage="English";
					alert("Please set the encrypted problem!");
					break;       
			}
		}
		else
		{
			location="reminder.html?cLanguage="+cLanguage;
		}
		 
	}
	
	function uaMatch(ua) {  
                    var match = rMsie.exec(ua);
		      
                    if (match != null) {  
                        return { browser : "IE", version : match[2] || "0" };  
                   }  
                    var match = rFirefox.exec(ua);  
                   if (match != null) {  
                       return { browser : match[1] || ""

Found 2024-10-01 by HttpPlugin

Create report

Open service 122.117.153.208:85

2024-09-29 21:42

HTTP/1.0 200 OK
Content-type: application/binary
Server: uc-httpd 1.0.0
Expires: 0

Page title: 404 File Not Found

<html><head><title>404 File Not Found</title></head>
<body>The requested URL was not found on this server</body></html>

Found 2024-09-29 by HttpPlugin

Create report

Open service 122.117.153.208:85

2024-09-27 19:55

HTTP/1.0 200 OK
Content-type: text/html
Server: uc-httpd 1.0.0
Expires: 0

Page title: NETSurveillance WEB

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <link rel="stylesheet" type="text/css" media="screen" href="m.css" />
    
    <title>NETSurveillance WEB</title>
    
    <!-- m.js -->

    <script type="text/javascript" language="JavaScript">
	 var bCrossBrow=false;
	 var bnpCheck = false;
var ShowTipFlag=2;
	// var SupportFind=false;
	if(navigator.userAgent.indexOf('IE') < 0)
	{
		if(navigator.platform != "Win32")
		{
			location="Login.htm";
		}
		var userAgent = navigator.userAgent,   
                rMsie = /(msie\s|trident.*rv:)([\w.]+)/,   
                rFirefox = /(firefox)\/([\w.]+)/,   
                rOpera = /(opera).+version\/([\w.]+)/,   
                rChrome = /(chrome)\/([\w.]+)/,   
                rSafari = /version\/([\w.]+).*(safari)/;
		var browserMatch = uaMatch(userAgent.toLowerCase());
		 
		if(browserMatch.browser!="IE")
		{
		    // location="Login.htm";
			 bCrossBrow=true;
			 	}
		
	}
	
	function reminder()
	{
		var nSel=$('langlist').selectedIndex;
		var cLanguage;
		switch(nSel)
		{
		case 0:
             cLanguage="English";
            
             break;
		case 1:
             cLanguage="French";
            
             break;
		case 2:
             cLanguage="Hungarian";
            
             break;
		case 3:
             cLanguage="Italian";
            
             break;
		case 4:
             cLanguage="Japanese";
             
             break;
		case 5:
             cLanguage="Portugal";
            
             break;
		case 6:
             cLanguage="Russian";
             
             break;
		case 7:
             cLanguage="SimpChinese";
            
             break;
		case 8:
             cLanguage="Spanish";
            
             break;
		case 9:
             cLanguage="TradChinese";
             
             break;
		case 10:
             cLanguage="German";
            
             break;
		case 11:
             cLanguage="Poland";
            
             break;
		case 12:
             cLanguage="Turkey";
           
             break;
		case 13:
             cLanguage="Romanian";
             break;
		case 14:
             cLanguage="Suomi";
             break;
		case 15:
             cLanguage="Korean";
             break;
		case 16:
             cLanguage="Farsi";
             break;
		case 17:
             cLanguage="Thai";
             break;
		case 18:
             cLanguage="Greek";
             break;
		case 19:
             cLanguage="Vietnamese";
             break;
		case 20:
             cLanguage="Brazilian";
             break;
		case 21:
             cLanguage="Hebrew";
             break;
		case 22:
             cLanguage="Arabic";  
             break;  
		case 23:
             cLanguage="Bulgarian";  
             break; 
		case 24:
      		 cLanguage="Czech";  
             break;
		default:
             cLanguage="English";
             break;   
		}			 
		if(2==ShowTipFlag)
		{
			switch(nSel) 
			{
				case 0:
					cLanguage="English";
					alert("Please set the encrypted problem!");
					break;
				case 7:
					cLanguage="SimpChinese";
					alert("请先设置密保问题!");   
					break;  
				default:
					cLanguage="English";
					alert("Please set the encrypted problem!");
					break;       
			}
		}
		else
		{
			location="reminder.html?cLanguage="+cLanguage;
		}
		 
	}
	
	function uaMatch(ua) {  
                    var match = rMsie.exec(ua);
		      
                    if (match != null) {  
                        return { browser : "IE", version : match[2] || "0" };  
                   }  
                    var match = rFirefox.exec(ua);  
                   if (match != null) {  
                       return { browser : match[1] || ""

Found 2024-09-27 by HttpPlugin

Create report

Domain summary

No record

Host 122.117.153.208

Taiwan

Vulnerable HiSilicon family DVR

Create report

Create report

Create report

Domain summary