References https://github.com/anfugui/11111/blob/main/%E5%A4%A7%E5%8D%8EEIMS-capture_handle%E6%8E%A5%E5%8F%A3%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md https://blog.csdn.net/qq_36334672/article/details/136649828 https://cn-sec.com/archives/2554372.html https://cn-sec.com/archives/2572154.html https://cve.imfht.com/detail/CVE-2024-13985 https://cve.imfht.com/detail/CVE-2024-13985?lang=en https://bdziyi.com/64640/ https://zhuanlan.zhihu.com/p/1932214870562047555 https://zhuanlan.zhihu.com/p/4249525215 https://wiki.tntsec.com/docs/bug/iot/%E5%A4%A7%E5%8D%8E/%E5%A4%A7%E5%8D%8E%E6%99%BA%E8%83%BD%E7%89%A9%E8%81%94%E7%BB%BC%E5%90%88%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0%E5%AD%98readpic%E4%BB%BB%E5%BC%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E.html
Related VulnerabilitiesPoCCVE-2024-13985: Dahua EIMS - Unauthenticated Remote Code Execution via capture_handlePoCdahua-eims-capture-handle-rce: Dahua EIMS capture_handle Remote Command Execution大华 智慧园区综合管理平台 capture_handle.action 命令执行漏洞大华 EIMS swagger-ui api信息泄露存在绕过访问漏洞