LeakIX - Host 171.6.165.143

Vulnerable HiSilicon family DVR

This vulnerability (with proof of concept (PoC) code) affects DVR/NVR devices built using the HiSilicon hi3520d and similar system on a chip (SoC).

Exploiting the vulnerabilities lead to unauthorized remote code execution (RCE) using only the web interface, causing full takeover of the exploited device

IP: 171.6.165.143
Port: 8089
URL: http://171.6.165.143:8089

First seen 2024-06-01 16:57
Last seen 2024-06-05 21:15
Open for 4 days

Severity: high
Fingerprint: 321975614123c6c05f83e99b5b070eb1f17b1b12f17b1b12f17b1b12f17b1b12
```
Found HiSiliconDVR firmware:
Hardware: General AHB70016T-MH-V2
Vulnerable to multiple issues : LFI, possibly RCE
```
Found on 2024-06-05 21:15

Create report

Vulnerable HiSilicon family DVR

This vulnerability (with proof of concept (PoC) code) affects DVR/NVR devices built using the HiSilicon hi3520d and similar system on a chip (SoC).

Exploiting the vulnerabilities lead to unauthorized remote code execution (RCE) using only the web interface, causing full takeover of the exploited device

IP: 171.6.165.143
Port: 8086
URL: http://171.6.165.143:8086

First seen 2024-06-01 01:37
Last seen 2024-06-05 20:08
Open for 4 days

Severity: high
Fingerprint: 321975614123c6c05f83e99b5b070eb1f17b1b12f17b1b12f17b1b12f17b1b12
```
Found HiSiliconDVR firmware:
Hardware: General AHB70016T-MH-V2
Vulnerable to multiple issues : LFI, possibly RCE
```
Found on 2024-06-05 20:08

Create report

Vulnerable HiSilicon family DVR

This vulnerability (with proof of concept (PoC) code) affects DVR/NVR devices built using the HiSilicon hi3520d and similar system on a chip (SoC).

Exploiting the vulnerabilities lead to unauthorized remote code execution (RCE) using only the web interface, causing full takeover of the exploited device

IP: 171.6.165.143
Port: 8088
URL: http://171.6.165.143:8088

First seen 2024-05-31 02:07
Last seen 2024-06-05 20:02
Open for 5 days

Severity: high
Fingerprint: 321975614123c6c05f83e99b5b070eb1f17b1b12f17b1b12f17b1b12f17b1b12
```
Found HiSiliconDVR firmware:
Hardware: General AHB70016T-MH-V2
Vulnerable to multiple issues : LFI, possibly RCE
```
Found on 2024-06-05 20:02

Create report

Vulnerable HiSilicon family DVR

This vulnerability (with proof of concept (PoC) code) affects DVR/NVR devices built using the HiSilicon hi3520d and similar system on a chip (SoC).

Exploiting the vulnerabilities lead to unauthorized remote code execution (RCE) using only the web interface, causing full takeover of the exploited device

IP: 171.6.165.143
Port: 8085
URL: http://171.6.165.143:8085

First seen 2024-06-01 13:05
Last seen 2024-06-03 22:13
Open for 2 days

Severity: high
Fingerprint: 321975614123c6c05f83e99b5b070eb1f17b1b12f17b1b12f17b1b12f17b1b12
```
Found HiSiliconDVR firmware:
Hardware: General AHB70016T-MH-V2
Vulnerable to multiple issues : LFI, possibly RCE
```
Found on 2024-06-03 22:13

Create report

Vulnerable HiSilicon family DVR

This vulnerability (with proof of concept (PoC) code) affects DVR/NVR devices built using the HiSilicon hi3520d and similar system on a chip (SoC).

Exploiting the vulnerabilities lead to unauthorized remote code execution (RCE) using only the web interface, causing full takeover of the exploited device

IP: 171.6.165.143
Port: 8087
URL: http://171.6.165.143:8087

First seen 2024-06-01 09:40
Last seen 2024-06-03 20:30
Open for 2 days

Severity: high
Fingerprint: 321975614123c6c05f83e99b5b070eb1f17b1b12f17b1b12f17b1b12f17b1b12
```
Found HiSiliconDVR firmware:
Hardware: General AHB70016T-MH-V2
Vulnerable to multiple issues : LFI, possibly RCE
```
Found on 2024-06-03 20:30

Create report

Host 171.6.165.143

Thailand

Vulnerable HiSilicon family DVR

Vulnerable HiSilicon family DVR

Vulnerable HiSilicon family DVR

Vulnerable HiSilicon family DVR

Vulnerable HiSilicon family DVR

Domain summary