LeakIX - Host 27.75.113.212

Vulnerable HiSilicon family DVR

This vulnerability (with proof of concept (PoC) code) affects DVR/NVR devices built using the HiSilicon hi3520d and similar system on a chip (SoC).

Exploiting the vulnerabilities lead to unauthorized remote code execution (RCE) using only the web interface, causing full takeover of the exploited device

IP: 27.75.113.212
Port: 5016
URL: http://27.75.113.212:5016

First seen 2024-07-16 21:34
Last seen 2024-07-27 23:05
Open for 11 days

Severity: high
Fingerprint: 321975614123c6c05f83e99b74b6d9e701d3b64c01d3b64c01d3b64c01d3b64c
```
Found HiSiliconDVR firmware:
Hardware: General AHB7004T-MHV2
Vulnerable to multiple issues : LFI, possibly RCE
```
Found on 2024-07-27 23:05

Create report

Vulnerable HiSilicon family DVR

This vulnerability (with proof of concept (PoC) code) affects DVR/NVR devices built using the HiSilicon hi3520d and similar system on a chip (SoC).

Exploiting the vulnerabilities lead to unauthorized remote code execution (RCE) using only the web interface, causing full takeover of the exploited device

IP: 27.75.113.212
Port: 8005
URL: http://27.75.113.212:8005

First seen 2024-07-16 20:39
Last seen 2024-07-27 20:41
Open for 11 days

Severity: high
Fingerprint: 321975614123c6c05f83e99b74b6d9e701d3b64c01d3b64c01d3b64c01d3b64c
```
Found HiSiliconDVR firmware:
Hardware: General AHB7004T-MHV2
Vulnerable to multiple issues : LFI, possibly RCE
```
Found on 2024-07-27 20:41

Create report

Vulnerable HiSilicon family DVR

This vulnerability (with proof of concept (PoC) code) affects DVR/NVR devices built using the HiSilicon hi3520d and similar system on a chip (SoC).

Exploiting the vulnerabilities lead to unauthorized remote code execution (RCE) using only the web interface, causing full takeover of the exploited device

IP: 27.75.113.212
Port: 8008
URL: http://27.75.113.212:8008

First seen 2024-07-16 21:24
Last seen 2024-07-21 22:05
Open for 5 days

Severity: high
Fingerprint: 321975614123c6c05f83e99b74b6d9e701d3b64c01d3b64c01d3b64c01d3b64c
```
Found HiSiliconDVR firmware:
Hardware: General AHB7004T-MHV2
Vulnerable to multiple issues : LFI, possibly RCE
```
Found on 2024-07-21 22:05

Create report

Host 27.75.113.212

Vietnam

Vulnerable HiSilicon family DVR

Vulnerable HiSilicon family DVR

Vulnerable HiSilicon family DVR

Domain summary