References https://www.hikvision.com/cn/support/CybersecurityCenter/SecurityNotices/2023-03/ https://net.xju.edu.cn/info/1158/1512.htm https://zhuanlan.zhihu.com/p/639514473 https://blog.csdn.net/y995zq/article/details/134513324 https://adm8n.github.io/%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0/%E6%B5%B7%E5%BA%B7%E5%A8%81%E8%A7%86isecure%20center%20%E7%BB%BC%E5%90%88%E5%AE%89%E9%98%B2%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0%E5%AD%98%E5%9C%A8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E/ https://www.ddpoc.com/DVB-2023-4871.html https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E6%B5%B7%E5%BA%B7%E5%A8%81%E8%A7%86/%E6%B5%B7%E5%BA%B7%E5%A8%81%E8%A7%86%E7%BB%BC%E5%90%88%E5%AE%89%E9%98%B2%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0clusters%E6%8E%A5%E5%8F%A3%E5%AD%98%E5%9C%A8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md https://stack.chaitin.com/vuldb/detail/2f54e0b7-cf34-4778-8065-a4cc111c6b5c https://stack.chaitin.com/vuldb/detail/2156b364-f35b-42ae-8035-3909d19e8f15 https://www.lmboke.com/archives/hai-kang-wei-shi-zong-he-an-fang-guan-li-ping-tai-ren-yi-wen-jian-du-qu-lou-dong https://github.com/Mr-xn/Penetration_Testing_POC/blob/master/books/%E6%B5%B7%E5%BA%B7%E5%A8%81%E8%A7%86%E7%BB%BC%E5%90%88%E5%AE%89%E9%98%B2%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0uploadAllPackage%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0%E5%88%86%E6%9E%90.html https://github.com/0day404/HV-2024-POC/blob/main/%E6%B5%B7%E5%BA%B7%E5%A8%81%E8%A7%86%E7%BB%BC%E5%90%88%E5%AE%89%E9%98%B2%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0uploadAllPackage%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
Related Vulnerabilities海康威视综合安防管理平台licenseExpire.do命令执行漏洞PoChikvision-applyautologinticket-rce: 海康威视综合安防管理平台 applyAutoLoginTicket RCEPoChikvision-fastjson-rce: 海康威视综合安防管理平台 Fastjson 远程命令执行漏洞海康威视-综合安防管理平台 actions 远程命令执行漏洞海康威视综合安防管理平台 applyST 远程代码执行漏洞海康威视综合安防管理平台/clusters 接口文件上传漏洞海康威视综合安防管理平台 uploadAllPackage 任意文件上传漏洞海康威视综合安防管理平台 clusters接口 任意文件上传漏洞海康威视综合安防管理平台clusters任意文件上传漏洞海康威视综合安防管理平台 licenseExpire.do 远程命令注入漏洞海康威视综合安防管理平台 /daf/daf/v1/drivers/install 远程代码执行漏洞海康威视综合安防管理平台 /api/packages 前台任意文件上传漏洞