LeakIX - Host 122.117.210.148

Host 122.117.210.148

Taiwan

Data Communication Business Group

Vulnerable HiSilicon family DVR

This vulnerability (with proof of concept (PoC) code) affects DVR/NVR devices built using the HiSilicon hi3520d and similar system on a chip (SoC).

Exploiting the vulnerabilities lead to unauthorized remote code execution (RCE) using only the web interface, causing full takeover of the exploited device

IP: 122.117.210.148
Port: 1000
URL: http://122.117.210.148:1000

First seen 2022-05-29 04:16
- Severity: high
  Fingerprint: 321975614123c6c05f83e99b1daaa3babaee656bbaee656bbaee656bbaee656b
```
Found HiSiliconDVR firmware:
Hardware: General AHB7008T-GS-V3
Vulnerable to multiple issues : LFI, possibly RCE
```
  Found on 2022-05-29 04:16
Create report

2024-04-25 06:47

HTTP/1.1 200 OK
Content-type: text/html
Content-Length: 1982
Connection: close


<!DOCTYPE html>
<html>
<head>
	<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
    <title></title>
    <link rel="shortcut icon" type="image/x-icon" href="/favicon.ico" media="screen" />
</head>
<body>
    <div class="loadingIndicator_bk">
    </div>
    <div class="loadingIndicator_tip">
        <div style="height: 300px;">
        </div>
        <span class="msg_border"><span class="msg"></span></span>
    </div>
    <div id="InitialView" style="background: #fff center url(css/Pictures/initview.gif) no-repeat; width: 100%; height: 100%;"></div>
    <div id="BaseContent">
    </div>
    <!--顶层浮动提示框-->
    <div id="topFloatMsg">
        <div id="topFloatMsg_title">
        </div>
        <div id="topFloatMsg_body">
            <div id="topFloatMsg_icon">
            </div>
            <div id="topFloatMsg_content">
            </div>
        </div>
        <div id="topFloatMsg_bottom">
        </div>
    </div>
    <iframe id="topFloatMsg_bk" scrolling="no" frameborder="0" src="about:blank"></iframe>
    <!--顶层滚动消息框-->
    <div id="topRollMsg">
        <div id="topRollMsg_title">
            <span lc="html" lk="IDCS_INFO_TIP"></span>
            <div id="topRollMsg_close">
            </div>
        </div>
        <div id="topRollMsg_content">
        </div>
    </div>
    <iframe id="topRollMsg_bk" width="100%" height="100%" scrolling="no" frameborder="0"
        src="about:blank"></iframe>
    <script language="javascript" for="VideoPlugin" event="NotifyResultToJs(strXMLFormat, lStrLen)">
        VideoPluginNotify(strXMLFormat, lStrLen);
    </script>
    <script language="javascript" for="TimeSliderPlugin" event="NotifyResultToJs(strXMLFormat, lStrLen)">
        TimeSliderPluginNotify(strXMLFormat, lStrLen);
    </script>
    <script data-main="js/index.js?v=20210528.01" src="js/lib/require.js" type="text/javascript"></script>
</body>
</html>

Found 2024-04-25 by HttpPlugin

Create report

Domain summary

No record

Host 122.117.210.148

Taiwan

Vulnerable HiSilicon family DVR

Create report

Domain summary