Host 223.206.41.252
Thailand
-
Vulnerable HiSilicon family DVR
This vulnerability (with proof of concept (PoC) code) affects DVR/NVR devices built using the HiSilicon hi3520d and similar system on a chip (SoC).
Exploiting the vulnerabilities lead to unauthorized remote code execution (RCE) using only the web interface, causing full takeover of the exploited device
First seen 2024-04-22 21:00
Last seen 2024-04-28 17:50
Open for 5 days-
Severity: high
Fingerprint: 321975614123c6c05f83e99bf30ea5eb22cca46022cca46022cca46022cca460Found HiSiliconDVR firmware: Hardware: General AHB7008T-MHV2 Vulnerable to multiple issues : LFI, possibly RCE
Found on 2024-04-28 17:50
-
-
Open service 223.206.41.252:80
2024-06-13 15:22
HTTP/1.1 200 OK Date: Thu, 13 Jun 2024 22:22:16 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1777 Connection: close Expires: Thu, 13 Jun 2024 22:22:15 GMT Cache-Control: no-cache X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: master-only Referrer-Policy: no-referrer-when-downgrade Accept-Ranges: bytes <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=gbk" > <script language ="javascript "type ="text/javascript"> document.write('<script src="./js/jquery.js?'+new Date().getTime()+'"><'+'/'+'script>'); document.write('<script src="./js/xhr.js?'+new Date().getTime()+'"><'+'/'+'script>'); document.write('<script src="./js/versionControl.js?'+new Date().getTime()+'"><'+'/'+'script>'); document.write('<script src="./js/access.js?'+new Date().getTime()+'"><'+'/'+'script>'); </script> <script language="javascript"> function frmLoad() { XHR.get("get_operator", null, redirect); } function redirect(data) { var url = "html/login_inter.html"; if ( data != null && data != undefined && data.operators_code != null && data.operators_code != undefined ) { url = getAccessLoginPage(data.operators_code); } if(data.operator_name == "TH_3BB"){ url = "html/login_3bb.html"; } if(data.operator_name == "PH_PLDT"){ sessionStorage.setItem("fh_access", "0"); url = "html/login_pldt.html"; } if(data.operator_name == "BZ_TIM"){ url = "public/index.html"; } if(data.operator_name == "PLE_PALTEL"){ url = "html/login_paltel.html"; } if(data.operator_name == "TH_AIS"){ url = "html/login_ais.html"; } //ROM_RCSRDS/MAGYAR_4IG if(data.operator_name == "ROM_RCSRDS" ){ url = "html/login_romania.html"; } if(data.operator_name == "MAGYAR_4IG"){ url = "html/login_magyar.html"; } window.location.href = url; } </script> </head> <body onLoad='frmLoad();'> </body> </html>Found 2 days ago by HttpPluginCreate report