LeakIX - Host 217.77.218.32

Host 217.77.218.32

Ukraine

WildPark Co

Vulnerable HiSilicon family DVR

This vulnerability (with proof of concept (PoC) code) affects DVR/NVR devices built using the HiSilicon hi3520d and similar system on a chip (SoC).

Exploiting the vulnerabilities lead to unauthorized remote code execution (RCE) using only the web interface, causing full takeover of the exploited device

IP: 217.77.218.32
Domain: slash777.direct.quickconnect.to
Port: 80
URL: http://slash777.direct.quickconnect.to

First seen 2023-07-22 02:13
Last seen 2023-10-10 23:59
Open for 80 days
- Severity: high
  Fingerprint: 321975614123c6c05f83e99bf30ea5eb22cca46022cca46022cca46022cca460
```
Found HiSiliconDVR firmware:
Hardware: General AHB7008T-MHV2
Vulnerable to multiple issues : LFI, possibly RCE
```
  Found on 2023-10-10 23:59
Create report
Vulnerable HiSilicon family DVR

This vulnerability (with proof of concept (PoC) code) affects DVR/NVR devices built using the HiSilicon hi3520d and similar system on a chip (SoC).

Exploiting the vulnerabilities lead to unauthorized remote code execution (RCE) using only the web interface, causing full takeover of the exploited device

IP: 217.77.218.32
Port: 80
URL: http://217.77.218.32

First seen 2022-05-14 23:30
Last seen 2023-10-03 13:56
Open for 506 days
- Severity: high
  Fingerprint: 321975614123c6c05f83e99bf30ea5eb22cca46022cca46022cca46022cca460
```
Found HiSiliconDVR firmware:
Hardware: General AHB7008T-MHV2
Vulnerable to multiple issues : LFI, possibly RCE
```
  Found on 2023-10-03 13:56
Create report

Domain summary

slash777.direct.quickconnect.to 1

1 recorded

Host 217.77.218.32

Ukraine

Vulnerable HiSilicon family DVR

Vulnerable HiSilicon family DVR

Domain summary