LeakIX - Host 195.36.26.51

Vulnerable HiSilicon family DVR

This vulnerability (with proof of concept (PoC) code) affects DVR/NVR devices built using the HiSilicon hi3520d and similar system on a chip (SoC).

Exploiting the vulnerabilities lead to unauthorized remote code execution (RCE) using only the web interface, causing full takeover of the exploited device

IP: 195.36.26.51
Port: 84
URL: http://195.36.26.51:84

First seen 2024-06-20 17:48
Last seen 2024-06-23 23:06
Open for 3 days

Severity: high
Fingerprint: 321975614123c6c05f83e99bd05ea65808e5fd7d08e5fd7d08e5fd7d08e5fd7d
```
Found HiSiliconDVR firmware:
Hardware: General 50H10L_S38
Vulnerable to multiple issues : LFI, possibly RCE
```
Found on 2024-06-23 23:06

Create report

Vulnerable HiSilicon family DVR

This vulnerability (with proof of concept (PoC) code) affects DVR/NVR devices built using the HiSilicon hi3520d and similar system on a chip (SoC).

Exploiting the vulnerabilities lead to unauthorized remote code execution (RCE) using only the web interface, causing full takeover of the exploited device

IP: 195.36.26.51
Port: 82
URL: http://195.36.26.51:82

First seen 2024-06-20 09:38
Last seen 2024-06-23 22:14
Open for 3 days

Severity: high
Fingerprint: 321975614123c6c05f83e99bd05ea65808e5fd7d08e5fd7d08e5fd7d08e5fd7d
```
Found HiSiliconDVR firmware:
Hardware: General 50H10L_S38
Vulnerable to multiple issues : LFI, possibly RCE
```
Found on 2024-06-23 22:14

Create report

Vulnerable HiSilicon family DVR

This vulnerability (with proof of concept (PoC) code) affects DVR/NVR devices built using the HiSilicon hi3520d and similar system on a chip (SoC).

Exploiting the vulnerabilities lead to unauthorized remote code execution (RCE) using only the web interface, causing full takeover of the exploited device

IP: 195.36.26.51
Port: 81
URL: http://195.36.26.51:81

First seen 2024-06-20 22:55
Last seen 2024-06-23 21:40
Open for 2 days

Severity: high
Fingerprint: 321975614123c6c05f83e99bd05ea65808e5fd7d08e5fd7d08e5fd7d08e5fd7d
```
Found HiSiliconDVR firmware:
Hardware: General 50H10L_S38
Vulnerable to multiple issues : LFI, possibly RCE
```
Found on 2024-06-23 21:40

Create report

Vulnerable HiSilicon family DVR

This vulnerability (with proof of concept (PoC) code) affects DVR/NVR devices built using the HiSilicon hi3520d and similar system on a chip (SoC).

Exploiting the vulnerabilities lead to unauthorized remote code execution (RCE) using only the web interface, causing full takeover of the exploited device

IP: 195.36.26.51
Port: 83
URL: http://195.36.26.51:83

First seen 2024-06-22 02:51
Last seen 2024-06-23 21:14
Open for 1 days

Severity: high
Fingerprint: 321975614123c6c05f83e99bd05ea65808e5fd7d08e5fd7d08e5fd7d08e5fd7d
```
Found HiSiliconDVR firmware:
Hardware: General 50H10L_S38
Vulnerable to multiple issues : LFI, possibly RCE
```
Found on 2024-06-23 21:14

Create report

Host 195.36.26.51

Italy

Vulnerable HiSilicon family DVR

Vulnerable HiSilicon family DVR

Vulnerable HiSilicon family DVR

Vulnerable HiSilicon family DVR

Domain summary