返回 CVE 浏览器

CVE-2020-24217

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1920%

EPSS Percentile6.41th

Published2020年10月6日

Last Modified2024年11月21日

Vulnerability Description

An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. The file-upload endpoint does not enforce authentication. Attackers can send an unauthenticated HTTP request to upload a custom firmware component, possibly in conjunction with command injection, to achieve arbitrary code execution.

Affected Platforms (CPE)

💻

Szuray

Iptv\/h.264 Video Encoder Firmware

All versions

💻

Szuray

Iptv\/h.265 Video Encoder Firmware

All versions

💻

Jtechdigital

H.264 Iptv Encoder 1080p\@60hz Firmware

All versions

💻

Provideoinstruments

Vecaster Hd H264 Firmware

All versions

💻

Provideoinstruments

Vecaster Hd Hevc Firmware

All versions

💻

Provideoinstruments

Vecaster 4k Hevc Firmware

All versions

💻

Provideoinstruments

Vecaster Hd Sdi Firmware

All versions

References & Advisories

🔗 http://packetstormsecurity.com/files/159597/HiSilicon-Video-Encoder-Command-Injection.html

🔗 http://packetstormsecurity.com/files/159599/HiSilicon-Video-Encoder-Malicious-Firmware-Code-Execution.html

🔗 https://kojenov.com/2020-09-15-hisilicon-encoder-vulnerabilities/

🔗 https://www.kb.cert.org/vuls/id/896979

🔗 http://packetstormsecurity.com/files/159597/HiSilicon-Video-Encoder-Command-Injection.html

🔗 http://packetstormsecurity.com/files/159599/HiSilicon-Video-Encoder-Malicious-Firmware-Code-Execution.html

🔗 https://kojenov.com/2020-09-15-hisilicon-encoder-vulnerabilities/

🔗 https://www.kb.cert.org/vuls/id/896979

相关漏洞威胁

CVE-2020-393610.0

UltraLog Express device management interface does not properly filter user inputted string in some specific parameters, attackers ...

CVE-2020-1249310.0

An open port used for debugging in SWARCOs CPU LS4000 Series with versions starting with G4... grants root access to the device wi...

CVE-2020-079610.0

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles cer...

CVE-2020-628710.0

SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which...