This vulnerability kown as CVE-2018-9995 (with proof of concept (PoC) code) affects a wide range of DVR/NVR devices.
Exploiting the vulnerability leads to credentials disclosure and device takeover.
Severity: high
Fingerprint: f46dea8d13f5e4cabc3c1a71b4ae0d80b4ae0d80b4ae0d80b4ae0d80b4ae0d80
Running generic DVR software vulnerable to CVE-2018-9995 Found 6 users in the user list
Open service 61.92.251.82:6005
2024-12-21 23:57
HTTP/1.0 302 Found Common:CDebugger:SetLevel already close, Current output=2(0:std;1:file;10:telnet) HTTP/1.0 302 Found content-type: text/html; charset=UTF-8 P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT' Location: /login.rsp Page title: 302 Moved <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF='/login.rsp'>here</a></BODY></HTML>
Open service 61.92.251.82:6005
2024-12-19 22:06
HTTP/1.0 302 Found Common:CDebugger:SetLevel already close, Current output=2(0:std;1:file;10:telnet) HTTP/1.0 302 Found content-type: text/html; charset=UTF-8 P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT' Location: /login.rsp Page title: 302 Moved <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF='/login.rsp'>here</a></BODY></HTML>
Open service 61.92.251.82:6005
2024-12-15 23:21
HTTP/1.0 302 Found Common:CDebugger:SetLevel already close, Current output=2(0:std;1:file;10:telnet) HTTP/1.0 302 Found content-type: text/html; charset=UTF-8 P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT' Location: /login.rsp Page title: 302 Moved <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF='/login.rsp'>here</a></BODY></HTML>
Open service 61.92.251.82:6005
2024-12-13 22:58
HTTP/1.0 302 Found Common:CDebugger:SetLevel already close, Current output=2(0:std;1:file;10:telnet) HTTP/1.0 302 Found content-type: text/html; charset=UTF-8 P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT' Location: /login.rsp Page title: 302 Moved <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF='/login.rsp'>here</a></BODY></HTML>
Open service 61.92.251.82:6005
2024-12-11 23:27
HTTP/1.0 302 Found Common:CDebugger:SetLevel already close, Current output=2(0:std;1:file;10:telnet) HTTP/1.0 302 Found content-type: text/html; charset=UTF-8 P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT' Location: /login.rsp Page title: 302 Moved <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF='/login.rsp'>here</a></BODY></HTML>
Open service 61.92.251.82:6005
2024-12-01 23:15
HTTP/1.0 302 Found Common:CDebugger:SetLevel already close, Current output=2(0:std;1:file;10:telnet) HTTP/1.0 302 Found content-type: text/html; charset=UTF-8 P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT' Location: /login.rsp Page title: 302 Moved <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF='/login.rsp'>here</a></BODY></HTML>
Open service 61.92.251.82:6005
2024-11-29 23:31
HTTP/1.0 302 Found Common:CDebugger:SetLevel already close, Current output=2(0:std;1:file;10:telnet) HTTP/1.0 302 Found content-type: text/html; charset=UTF-8 P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT' Location: /login.rsp Page title: 302 Moved <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF='/login.rsp'>here</a></BODY></HTML>
Open service 61.92.251.82:6005
2024-11-27 23:52
HTTP/1.0 302 Found Common:CDebugger:SetLevel already close, Current output=2(0:std;1:file;10:telnet) HTTP/1.0 302 Found content-type: text/html; charset=UTF-8 P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT' Location: /login.rsp Page title: 302 Moved <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF='/login.rsp'>here</a></BODY></HTML>