LeakIX - Host 200.232.59.26

Host 200.232.59.26

Brazil

TELEFONICA BRASIL S.A

Vulnerable HiSilicon family DVR

This vulnerability (with proof of concept (PoC) code) affects DVR/NVR devices built using the HiSilicon hi3520d and similar system on a chip (SoC).

Exploiting the vulnerabilities lead to unauthorized remote code execution (RCE) using only the web interface, causing full takeover of the exploited device

IP: 200.232.59.26
Port: 80
URL: http://200.232.59.26

First seen 2022-05-14 23:32
Last seen 2023-02-03 23:07
Open for 264 days
- Severity: high
  Fingerprint: 321975614123c6c05f83e99bf30ea5eb22cca46022cca46022cca46022cca460
```
Found HiSiliconDVR firmware:
Hardware: General AHB7008T-MHV2
Vulnerable to multiple issues : LFI, possibly RCE
```
  Found on 2022-05-14 23:32
Create report

2024-06-15 07:06

HTTP/1.1 200 OK
CONNECTION: close
Date: Sat, 15 Jun 2024 04:06:06 GMT
Last-Modified: Thu, 18 May 2017 08:07:25 GMT
Etag: "1495094845:35f4"
CONTENT-LENGTH: 13812
CONTENT-TYPE: text/html

Page title: Intelbras

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <html> <head> <title>Intelbras</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=6;IE=7; IE=8; IE=EmulateIE7"> <script type="text/javascript" src="jsBase/lib/base64.js"></script> <script type="text/javascript" src="jsBase/lib/md5.js"></script> <script type="text/javascript" src="jsBase/lib/m1.2.js"></script> <script type="text/javascript" src="jsBase/lib/more.js"></script> <script type="text/javascript" src="jsCore/aes.js"></script> <script type="text/javascript" src="jsCore/rsa.js"></script> <script type="text/javascript" src="js/appAbility.js"></script> <script type="text/javascript" src="jsCore/rpcCore.js"></script> <script type="text/javascript" src="jsBase/lib/sea.js"></script> <script type="text/javascript" src="jsCore/common.js"></script> <script type="text/javascript" src="js/loginEx.js"></script> <script type="text/javascript" src="js/publicFunc.js"></script> <script type="text/javascript" src="js/system.js"></script> <script type="text/javascript" src="/pluginVersion.js"></script> <script type="text/javascript" src="/olp.js"></script> <script type="text/javascript" src="cap.js"></script> <script type="text/javascript" src="Component/level.js"></script>  <script type="text/javascript" src="js/index.js"></script> <script type="text/javascript" src="/js/pluginAdaptor.js"></script> <script type="text/javascript" src="js/eventScript.js"></script> <link href="favicon.ico" type="image/x-icon" rel="shortcut icon"> <link rel="stylesheet" type="text/css" href="/jsBase/widget/css/ui.css"> <link rel="stylesheet" type="text/css" href="/jsBase/widget/css/skin.css"> <link rel="stylesheet" type="text/css" href="/css/oem.css"> </head> <body onscroll="$('nav_margin').style.visibility = 'hidden'; $('nav_margin').style.visibility = 'visible'">  <div id="loading" class="J_load_dialog"> <p id="lab_loading" class="J_load_p" t="com_msg.loading activex"></p> </div>   <div id="l" class="login"> <div class="login-container"> <div class="login-content"> <div class="login-logo" id="index_logo"></div> <div class="login-inputbox fn-clear"> <form> <div class="login-input-item"> <div class="login-username-icon"></div> <label class="login-input-title login_oem_username" t="com_str.username+: ">username</label> <input type="text" id="username" class="ui-input fn-width163 login_inputbox" onkeydown="if (event.keyCode==13) event.keyCode=9">  <div class="login-btnbox custom-btnbox"> <a id="ulgin" class="ui-button fn-width80" onclick="login()" href="javascript:;" t="com_str.login"></a> </div> </div> <div class="login-input-item"> <div class="login-password-icon"></div> <label class="login-input-title login_oem_password" id="paswd" t="com_str.password+: ">password</label> <input id="password" type="password" class="ui-input fn-width163 login_inputbox login_oem_top" onkeydown="if (event.keyCode==13) login()">  <div class="login-btnbox custom-btnbox"> <a id="cancl" class="ui-button fn-width80" onclick="$('password').value=''" href="javascript:;" t="com_button.comcanncel"></a> </div> </div> <div class="login-input-item login-type-display" id="ul_ltype" style="display:none"> <label class="login-input-title" t="info_log.allTypes+: ">type：</label> <select class="fn-width169" id="s_lgType"> <option value="0">TCP</option> <option value="4">UDP</option> <option t="conf_net.gui32_muticastset" value="3">multicast</option> </select> </div>  <div class="custom-ul-type login-input-item fn-padl190" id="ul_type" style="display:none"> <div class="ui-checkbox"><input id="net_lan" name="wtype" checked="checked" type="radio"></div> <label class="ui-label-sub" for="net_lan">LAN</label> <div class="ui-checkbox"><input id="net_wan" name="wtype" type="radio"></div> <label class="ui-label-sub" for="net_wan">WAN</label> </div>  <div class="ui-button-box login-btnbox general-btnbox"> <a t="com_str.login" class="ui-button fn-width80 login_confirm" onclick="login()" href="javascript:;">login</a> <a

Found 2024-06-15 by HttpPlugin

Create report

Open service 200.232.59.26:80

2024-06-12 23:36

HTTP/1.1 200 OK
CONNECTION: close
Date: Wed, 12 Jun 2024 20:36:41 GMT
Last-Modified: Thu, 18 May 2017 08:07:25 GMT
Etag: "1495094845:35f4"
CONTENT-LENGTH: 13812
CONTENT-TYPE: text/html

Page title: Intelbras

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <html> <head> <title>Intelbras</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=6;IE=7; IE=8; IE=EmulateIE7"> <script type="text/javascript" src="jsBase/lib/base64.js"></script> <script type="text/javascript" src="jsBase/lib/md5.js"></script> <script type="text/javascript" src="jsBase/lib/m1.2.js"></script> <script type="text/javascript" src="jsBase/lib/more.js"></script> <script type="text/javascript" src="jsCore/aes.js"></script> <script type="text/javascript" src="jsCore/rsa.js"></script> <script type="text/javascript" src="js/appAbility.js"></script> <script type="text/javascript" src="jsCore/rpcCore.js"></script> <script type="text/javascript" src="jsBase/lib/sea.js"></script> <script type="text/javascript" src="jsCore/common.js"></script> <script type="text/javascript" src="js/loginEx.js"></script> <script type="text/javascript" src="js/publicFunc.js"></script> <script type="text/javascript" src="js/system.js"></script> <script type="text/javascript" src="/pluginVersion.js"></script> <script type="text/javascript" src="/olp.js"></script> <script type="text/javascript" src="cap.js"></script> <script type="text/javascript" src="Component/level.js"></script>  <script type="text/javascript" src="js/index.js"></script> <script type="text/javascript" src="/js/pluginAdaptor.js"></script> <script type="text/javascript" src="js/eventScript.js"></script> <link href="favicon.ico" type="image/x-icon" rel="shortcut icon"> <link rel="stylesheet" type="text/css" href="/jsBase/widget/css/ui.css"> <link rel="stylesheet" type="text/css" href="/jsBase/widget/css/skin.css"> <link rel="stylesheet" type="text/css" href="/css/oem.css"> </head> <body onscroll="$('nav_margin').style.visibility = 'hidden'; $('nav_margin').style.visibility = 'visible'">  <div id="loading" class="J_load_dialog"> <p id="lab_loading" class="J_load_p" t="com_msg.loading activex"></p> </div>   <div id="l" class="login"> <div class="login-container"> <div class="login-content"> <div class="login-logo" id="index_logo"></div> <div class="login-inputbox fn-clear"> <form> <div class="login-input-item"> <div class="login-username-icon"></div> <label class="login-input-title login_oem_username" t="com_str.username+: ">username</label> <input type="text" id="username" class="ui-input fn-width163 login_inputbox" onkeydown="if (event.keyCode==13) event.keyCode=9">  <div class="login-btnbox custom-btnbox"> <a id="ulgin" class="ui-button fn-width80" onclick="login()" href="javascript:;" t="com_str.login"></a> </div> </div> <div class="login-input-item"> <div class="login-password-icon"></div> <label class="login-input-title login_oem_password" id="paswd" t="com_str.password+: ">password</label> <input id="password" type="password" class="ui-input fn-width163 login_inputbox login_oem_top" onkeydown="if (event.keyCode==13) login()">  <div class="login-btnbox custom-btnbox"> <a id="cancl" class="ui-button fn-width80" onclick="$('password').value=''" href="javascript:;" t="com_button.comcanncel"></a> </div> </div> <div class="login-input-item login-type-display" id="ul_ltype" style="display:none"> <label class="login-input-title" t="info_log.allTypes+: ">type：</label> <select class="fn-width169" id="s_lgType"> <option value="0">TCP</option> <option value="4">UDP</option> <option t="conf_net.gui32_muticastset" value="3">multicast</option> </select> </div>  <div class="custom-ul-type login-input-item fn-padl190" id="ul_type" style="display:none"> <div class="ui-checkbox"><input id="net_lan" name="wtype" checked="checked" type="radio"></div> <label class="ui-label-sub" for="net_lan">LAN</label> <div class="ui-checkbox"><input id="net_wan" name="wtype" type="radio"></div> <label class="ui-label-sub" for="net_wan">WAN</label> </div>  <div class="ui-button-box login-btnbox general-btnbox"> <a t="com_str.login" class="ui-button fn-width80 login_confirm" onclick="login()" href="javascript:;">login</a> <a

Found 2024-06-12 by HttpPlugin

Create report

Domain summary

No record

Host 200.232.59.26

Brazil

Vulnerable HiSilicon family DVR

Create report

Create report

Domain summary