References https://cn.uniview.com/Security/Notice/ https://cn.uniview.com/Security/Notice/202207/809872_197700_0.htm https://blog.csdn.net/jjjj1029056414/article/details/134931658 https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/iot/%E6%B5%99%E6%B1%9F%E5%AE%87%E8%A7%86%E7%A7%91%E6%8A%80-%E7%BD%91%E7%BB%9C%E8%A7%86%E9%A2%91%E5%BD%95%E5%83%8F%E6%9C%BA-ISC-LogReport.php-%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md https://www.cnblogs.com/charon1937/p/14076959.html https://www.ctfiot.com/79894.html https://www.exploit-db.com/exploits/43999 https://ssd-disclosure.com/ssd-advisory-uniview-preauth-rce/ https://nvd.nist.gov/vuln/detail/CVE-2021-45039 https://www.cnvd.org.cn/flaw/show/CNVD-2020-31565 https://www.ddpoc.com/DVB-2021-2034.html https://github.com/emadshanab/goby-poc6/blob/master/UNV-ip-camera-RCE-(CNVD-2020-31565).json https://github.com/emadshanab/goby-poc6/blob/master/Uniview-Cameras-main-cgi-RCE.json
Related VulnerabilitiesPoCCVE-2024-3850: Uniview NVR301-04S2-P4 - Cross-Site ScriptingPoCuniview-isc-logreport-php-rce: 浙江宇视科技 网络视频录像机 ISC LogReport.php 远程命令执行漏洞宇视科技 Uniview /Interface/DevManage/VM.php 命令注入漏洞浙江宇视科技 uniview 弱口令漏洞Uniview NVR301-04S2-P4 CVE-2024-3850 跨站脚本漏洞Uniview CVE-2021-45039 缓冲区溢出漏洞浙江宇视科技 uniview LogReport.php 命令执行漏洞