LeakIX - Host 190.128.222.26

Vulnerable HiSilicon family DVR

This vulnerability (with proof of concept (PoC) code) affects DVR/NVR devices built using the HiSilicon hi3520d and similar system on a chip (SoC).

Exploiting the vulnerabilities lead to unauthorized remote code execution (RCE) using only the web interface, causing full takeover of the exploited device

IP: 190.128.222.26
Port: 82
URL: http://190.128.222.26:82

First seen 2023-02-14 01:10
Last seen 2024-03-06 19:12
Open for 386 days

Severity: high
Fingerprint: 321975614123c6c05f83e99b9ef7d2d583a0925683a0925683a0925683a09256
```
Found HiSiliconDVR firmware:
Hardware: General TVI9708H_H
Vulnerable to multiple issues : LFI, possibly RCE
```
Found on 2024-03-06 19:12

Create report

Vulnerable HiSilicon family DVR

This vulnerability (with proof of concept (PoC) code) affects DVR/NVR devices built using the HiSilicon hi3520d and similar system on a chip (SoC).

Exploiting the vulnerabilities lead to unauthorized remote code execution (RCE) using only the web interface, causing full takeover of the exploited device

IP: 190.128.222.26
Port: 81
URL: http://190.128.222.26:81

First seen 2023-02-06 07:31
Last seen 2023-03-20 18:32
Open for 42 days

Severity: high
Fingerprint: 321975614123c6c05f83e99b9ef7d2d583a0925683a0925683a0925683a09256
```
Found HiSiliconDVR firmware:
Hardware: General TVI9708H_H
Vulnerable to multiple issues : LFI, possibly RCE
```
Found on 2023-02-06 07:31

Create report

Vulnerable HiSilicon family DVR

This vulnerability (with proof of concept (PoC) code) affects DVR/NVR devices built using the HiSilicon hi3520d and similar system on a chip (SoC).

Exploiting the vulnerabilities lead to unauthorized remote code execution (RCE) using only the web interface, causing full takeover of the exploited device

IP: 190.128.222.26
Port: 80
URL: http://190.128.222.26

First seen 2022-05-14 23:25
Last seen 2022-05-29 14:46
Open for 14 days

Severity: high
Fingerprint: 321975614123c6c05f83e99b9ef7d2d583a0925683a0925683a0925683a09256
```
Found HiSiliconDVR firmware:
Hardware: General TVI9708H_H
Vulnerable to multiple issues : LFI, possibly RCE
```
Found on 2022-05-14 23:25

Create report

Host 190.128.222.26

Paraguay

Vulnerable HiSilicon family DVR

Vulnerable HiSilicon family DVR

Vulnerable HiSilicon family DVR

Domain summary