References https://blog.csdn.net/qq_36618918/article/details/135107451 https://github.com/0day404/HV-2024-POC/blob/main/%E6%B5%B7%E5%BA%B7%E5%A8%81%E8%A7%86CVE-2023-6895%20IP%E7%BD%91%E7%BB%9C%E5%AF%B9%E8%AE%B2%E5%B9%BF%E6%92%AD%E7%B3%BB%E7%BB%9F%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C.md https://stack.chaitin.com/techblog/detail/290 https://cn-sec.com/archives/2319442.html https://blog.csdn.net/read5/article/details/155295484 https://cn-sec.com/archives/2322782.html https://cve.imfht.com/poc_detail/501dd733845377c98521487c28b4014c56e5a85c
Related VulnerabilitiesHIKVISION 综合安防管理平台 /artemis-portal/artemis/env 信息泄露漏洞hikvision-center-fastjson-rce: 海康威视综合安防-运行管理中心-Fastjson-远程命令执行漏洞hikvision-files-upload: Hikvision Files Uploadspon-ip-intercom-file-read: Spon Ip Intercom File ReadPoCCVE-2017-7921: Hikvision - Authentication BypassPoCCVE-2021-36260: Hikvision IP camera/NVR - Remote Command ExecutionPoCCVE-2023-6895: Hikvision IP ping.php - Command ExecutionPoCCVE-2017-7921: Hikvision CVE-2017-7921PoCCVE-2021-36260: Hikvision IP camera/NVR - Unauthenticated RCEPoChikvision-intercom-service-default-password: Hikvision Intercom Service Default PasswordPoChikvision-anfang-files-fileupload: HiKVISION 综合安防管理平台 files 任意文件上传PoChikvision-anfang-report-fileupload-2: HiKVISION 综合安防管理平台 report 任意文件上传PoChikvision-anfang-report-fileupload: HiKVISION 综合安防管理平台 report 任意文件上传