Host 49.49.31.195
Thailand
-
Vulnerable HiSilicon family DVR
This vulnerability (with proof of concept (PoC) code) affects DVR/NVR devices built using the HiSilicon hi3520d and similar system on a chip (SoC).
Exploiting the vulnerabilities lead to unauthorized remote code execution (RCE) using only the web interface, causing full takeover of the exploited device
First seen 2023-11-24 19:57-
Severity: high
Fingerprint: 321975614123c6c05f83e99b997241482d83fded2d83fded2d83fded2d83fdedFound HiSiliconDVR firmware: Hardware: General AHB8004T-GL Vulnerable to multiple issues : LFI, possibly RCE
Found on 2023-11-24 19:57
-
-
Open service 49.49.31.195:443
2024-06-02 20:56
HTTP/1.1 200 OK Content-Encoding: gzip Content-Type: text/html ETag: 33j8p3ghm6tQjfjy403g9N36qH6hxxc8 X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=15552000 Date: Sun, 02 Jun 2024 20:56:23 GMT Connection: close Transfer-Encoding: chunked Page title: FortiGate <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <title>FortiGate</title> <base href="/"> <meta name="viewport" content="width=device-width, initial-scale=1"> <meta name="apple-itunes-app" content="app-id=1157004084, app-argument={{::host_addr}}"> <link rel="apple-touch-icon" sizes="180x180" href="favicon/apple-touch-icon.png"> <link rel="shortcut icon" type="image/x-icon" href="favicon/favicon.ico"> <link rel="icon" type="image/png" sizes="32x32" href="favicon/favicon-32x32.png"> <link rel="icon" type="image/png" sizes="16x16" href="favicon/favicon-16x16.png"> <link rel="manifest" href="favicon/site.webmanifest"> <link rel="mask-icon" href="favicon/safari-pinned-tab.svg" color="#d43527"> <link rel="shortcut icon" href="favicon/favicon.ico"> <meta name="msapplication-TileColor" content="#d43527"> <meta name="msapplication-config" content="favicon/browserconfig.xml"> <script> function login_redirect(error) { 'use strict'; var url = window.location.pathname + window.location.search + window.location.hash; if (error) { console.warn(`Redirecting to login page: ${error}`); } else { console.warn('Redirecting to login page'); } window.location.href = '/logout?redir=' + encodeURIComponent(url); } window.__fosLoginRedirect__ = login_redirect; fetch('/api/v2/monitor/web-ui/extend-session').then(response => { if (!response.ok && response.status === 401) { login_redirect(); } }); </script> <style>@charset "UTF-8";body{font-family:Lato,Helvetica,Arial,sans-serif;font-weight:var(--nu-theme-dimension-normal-font-weight)}body{background-color:rgb(var(--nu-theme-override-text-background, var(--nu-theme-color-background-level0)));color:rgb(var(--nu-theme-on-color-background));font-size:15px!important}*{scrollbar-width:auto;scrollbar-color:rgb(var(--nu-theme-color-background-level5)) rgba(0,0,0,0)}*::-webkit-scrollbar{background-color:#0000;width:15px}*::-webkit-scrollbar-thumb{min-height:30px;border:3px solid rgba(0,0,0,0);background-clip:padding-box;border-radius:7px;background-color:rgb(var(--nu-theme-color-background-level5))}*::-webkit-scrollbar-button{width:0;height:0;display:none}*::-webkit-scrollbar-corner{background-color:#0000}@font-face{font-family:Lato;font-style:normal;font-weight:300;src:local("\263a\fe0e"),url(lato-light.woff2) format("woff2"),url(lato-light.woff) format("woff")}@font-face{font-family:Lato;font-style:normal;font-weight:400;src:local("\263a\fe0e"),url(lato-regular.woff2) format("woff2"),url(lato-regular.woff) format("woff")}@font-face{font-family:Lato;font-style:normal;font-weight:700;src:local("\263a\fe0e"),url(lato-bold.woff2) format("woff2"),url(lato-bold.woff) format("woff")}body{margin:0}</style><link rel="stylesheet" href="/static/styles.css" media="print" onload="this.media='all'"><noscript><link rel="stylesheet" href="/static/styles.css"></noscript></head> <body> <fos-root></fos-root> <script src="/static/runtime.js" type="module"></script><script src="/static/polyfills.js" type="module"></script><script src="/static/main.js" type="module"></script> </body></html>Found 15 hours ago by HttpPluginCreate report