Description
Hikvision Web Server是中国海康威视（Hikvision）公司的一个Web服务器。用于解析协议，提供服务。 Hikvision Web Server 中存在操作系统命令注入漏洞，该漏洞源于输入验证不足。攻击者可利用该漏洞通过发送带有恶意命令的消息来发起命令注入攻击。
Hikvision Web Server 操作系统命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.hikvision.com/cn/support/CybersecurityCenter/SecurityNotices/20210919/
https://stack.chaitin.com/vuldb/detail/fc1fbd8e-4888-445c-94d2-ce6833c38076
https://nvd.nist.gov/vuln/detail/CVE-2021-36260
https://blog.nsfocus.net/cve-2021-36260/
https://github.com/hktalent/MyDocs/blob/main/HIKVISION%20DSIDSIPC%20%E7%AD%89%E8%AE%BE%E5%A4%87%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%20CVE-2021-36260.md
https://zhuanlan.zhihu.com/p/412834399
https://advisories.checkpoint.com/defense/advisories/public/2022/cpai-2021-1025.html/