Description
TBK DVR-4104是TBK公司的一款数字视频录像机。TBK DVR存在命令注入漏洞，该漏洞是由于device.rsp接口对用户的请求验证不当导致的。
TBK DVR CVE-2024-3721 命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://vulners.com/cve/CVE-2024-3721
https://avd.aliyun.com/detail?id=AVD-2024-3721
https://cloud.tencent.cn/developer/article/2411176
https://www.ithome.com.tw/news/175173
https://www.anquanke.com/post/id/308303
https://www.ddpoc.com/DVB-2024-7077.html
https://stack.chaitin.com/vuldb/detail/d79e09fa-3def-4bce-8a8e-c666ad5c5434
https://xsx.tw/exploit/3584/
https://fortiguard.fortinet.com/tw/outbreak-alert/tbk-dvrs-botnet-attack
https://cn-sec.com/archives/2758554.html