CVE-2020-24215
CRITICAL
9.8
CVSS Severity Score
Vulnerability Description
An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. Attackers can use hard-coded credentials in HTTP requests to perform any administrative task on the device including retrieving the device's configuration (with the cleartext admin password), and uploading a custom firmware update, to ultimately achieve arbitrary code execution.
Affected Platforms (CPE)
💻
Szuray
Iptv\/h.264 Video Encoder Firmware
All versions💻
Szuray
Iptv\/h.265 Video Encoder Firmware
All versions💻
Jtechdigital
H.264 Iptv Encoder 1080p\@60hz Firmware
All versions💻
Provideoinstruments
Vecaster Hd H264 Firmware
All versions💻
Provideoinstruments
Vecaster Hd Hevc Firmware
All versions💻
Provideoinstruments
Vecaster 4k Hevc Firmware
All versions💻
Provideoinstruments