漏洞描述 【漏洞对象】HBGK的DVR摄像头 【漏洞描述】北京汉邦高科数字技术股份有限公司是国内领先的安防产品及行业解决方案提供商,致力于不断提升视频处理技术和视频分析技术,面向全球提供领先的安防产品。其旗下的网络硬盘录像机存在漏洞,使得攻击者通过访问main.asp页面就可以看到网络摄像机的型号和版本。
相关漏洞推荐 POC CVE-2021-41419: QVIS NVR/DVR - Remote Code Execution POC CVE-2018-15745: Argus Surveillance DVR 4.0.0.0 - Local File Inclusion POC CVE-2018-9995: TBK DVR4104/DVR4216 Devices - Authentication Bypass POC CVE-2021-42071: Visual Tools DVR VX16 4.2.28.0 - Unauthenticated OS Command Injection POC CVE-2024-7339: TVT DVR Sensitive Device - Information Disclosure POC CVE-2018-9995: DVR Authentication Bypass POC avtech-dvr-exposure: Avtech AVC798HA DVR Information Exposure POC CVE-2013-4982: AVTECH DVR - Login Verification Code Bypass POC avtech-dvr-exposure: AVTECH AVC798HA DVR - Information Exposure POC qvisdvr-deserialization-rce: QVISDVR JSF Deserialization - Remote Code Execution POC intelbras-dvr-unauth: Intelbras DVR - Unrestricted Access POC avtech-dvr-ssrf: AVTECH DVR - SSRF POC commax-credentials-disclosure: COMMAX Smart Home Ruvie CCTV Bridge DVR - RTSP Credentials Disclosure