References https://github.com/zan8in/pocwiki/blob/main/%E6%B5%B7%E5%BA%B7%E5%A8%81%E8%A7%86%E7%BB%BC%E5%90%88%E5%AE%89%E9%98%B2%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0%E4%BF%A1%E6%81%AF%E6%B3%84%E9%9C%B2.md https://blog.csdn.net/qq_37113223/article/details/135734224 https://peiqi.wgpsec.org/wiki/iot/HIKVISION/HiKVISION%20%E7%BB%BC%E5%90%88%E5%AE%89%E9%98%B2%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0%20env%20%E4%BF%A1%E6%81%AF%E6%B3%84%E6%BC%8F%E6%BC%8F%E6%B4%9E.html https://stack.chaitin.com/poc/detail/3459 https://www.cn-sec.com/archives/tag/%E6%B5%B7%E5%BA%B7%E7%BB%BC%E5%90%88%E5%AE%89%E9%98%B2 https://github.com/ibaiw/2023Hvv/blob/main/HiKVISION%20%E7%BB%BC%E5%90%88%E5%AE%89%E9%98%B2%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0%20env%20%E4%BF%A1%E6%81%AF%E6%B3%84%E6%BC%8F%E6%BC%8F%E6%B4%9E.md https://blog.csdn.net/2401_83799022/article/details/142331219
Related Vulnerabilities海康威视综合安防管理平台licenseExpire.do命令执行漏洞CVE-2023-6895: 海康威视IP网络对讲广播系统 ping.php 命令执行PoChikvision-applyautologinticket-rce: 海康威视综合安防管理平台 applyAutoLoginTicket RCEPoChikvision-downfle-fileread: 海康威视流媒体管理服务器后台任意文件读取漏洞PoChikvision-fastjson-rce: 海康威视综合安防管理平台 Fastjson 远程命令执行漏洞海康威视-综合安防管理平台 actions 远程命令执行漏洞海康威视iVMS download.action 任意文件读取漏洞海康威视iVMS 存在任意文件读取漏洞海康威视运行管理中心 downloadCsv 任意文件读取漏洞海康威视 iVMS-5000 弱口令漏洞海康威视视频融合赋能平台存在接口未授权访问漏洞海康威视摄像头弱口令漏洞海康威视综合安防管理平台 applyST 远程代码执行漏洞