This vulnerability kown as CVE-2018-9995 (with proof of concept (PoC) code) affects a wide range of DVR/NVR devices.
Exploiting the vulnerability leads to credentials disclosure and device takeover.
Severity: high
Fingerprint: f46dea8d13f5e4cabc3c1a71d172ef91d172ef91d172ef91d172ef91d172ef91
Running generic DVR software vulnerable to CVE-2018-9995 Found 1 users in the user list
Open service 220.123.186.120:9000
2024-12-21 23:45
HTTP/1.0 302 Found Common:CDebugger:SetLevel already close, Current output=2(0:std;1:file;10:telnet) HTTP/1.0 302 Found content-type: text/html; charset=UTF-8 P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT' Location: /login.rsp Page title: 302 Moved <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF='/login.rsp'>here</a></BODY></HTML>
Open service 220.123.186.120:9000
2024-12-19 23:08
HTTP/1.0 302 Found Common:CDebugger:SetLevel already close, Current output=2(0:std;1:file;10:telnet) HTTP/1.0 302 Found content-type: text/html; charset=UTF-8 P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT' Location: /login.rsp Page title: 302 Moved <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF='/login.rsp'>here</a></BODY></HTML>
Open service 220.123.186.120:9000
2024-12-18 01:02
HTTP/1.0 302 Found Common:CDebugger:SetLevel already close, Current output=2(0:std;1:file;10:telnet) HTTP/1.0 302 Found content-type: text/html; charset=UTF-8 P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT' Location: /login.rsp Page title: 302 Moved <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF='/login.rsp'>here</a></BODY></HTML>
Open service 220.123.186.120:9000
2024-12-15 23:23
HTTP/1.0 302 Found Common:CDebugger:SetLevel already close, Current output=2(0:std;1:file;10:telnet) HTTP/1.0 302 Found content-type: text/html; charset=UTF-8 P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT' Location: /login.rsp Page title: 302 Moved <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF='/login.rsp'>here</a></BODY></HTML>
Open service 220.123.186.120:9000
2024-12-13 21:51
HTTP/1.0 302 Found Common:CDebugger:SetLevel already close, Current output=2(0:std;1:file;10:telnet) HTTP/1.0 302 Found content-type: text/html; charset=UTF-8 P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT' Location: /login.rsp Page title: 302 Moved <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF='/login.rsp'>here</a></BODY></HTML>
Open service 220.123.186.120:9000
2024-12-11 23:50
HTTP/1.0 302 Found Common:CDebugger:SetLevel already close, Current output=2(0:std;1:file;10:telnet) HTTP/1.0 302 Found content-type: text/html; charset=UTF-8 P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT' Location: /login.rsp Page title: 302 Moved <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF='/login.rsp'>here</a></BODY></HTML>
Open service 220.123.186.120:9000
2024-12-01 23:54
HTTP/1.0 302 Found Common:CDebugger:SetLevel already close, Current output=2(0:std;1:file;10:telnet) HTTP/1.0 302 Found content-type: text/html; charset=UTF-8 P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT' Location: /login.rsp Page title: 302 Moved <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF='/login.rsp'>here</a></BODY></HTML>
Open service 220.123.186.120:9000
2024-11-29 21:40
HTTP/1.0 302 Found Common:CDebugger:SetLevel already close, Current output=2(0:std;1:file;10:telnet) HTTP/1.0 302 Found content-type: text/html; charset=UTF-8 P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT' Location: /login.rsp Page title: 302 Moved <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF='/login.rsp'>here</a></BODY></HTML>
Open service 220.123.186.120:9000
2024-11-27 23:32
HTTP/1.0 302 Found Common:CDebugger:SetLevel already close, Current output=2(0:std;1:file;10:telnet) HTTP/1.0 302 Found content-type: text/html; charset=UTF-8 P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT' Location: /login.rsp Page title: 302 Moved <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF='/login.rsp'>here</a></BODY></HTML>