Description
Hikvision Intercom Broadcasting System是中国海康威视（Hikvision）公司的一个对讲广播系统。 Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK)版本存在操作系统命令注入漏洞，该漏洞源于文件/php/ping.php的参数jsondata[ip]会导致操作系统命令注入。
Hikvision Intercom Broadcasting System 操作系统命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-6895
https://www.sentinelone.com/vulnerability-database/cve-2023-6895/
https://vuldb.com/?id.248254
https://www.lmboke.com/archives/hai-kang-wei-shi-dui-jiang-guang-bo-xi-tong-yuan-cheng-ming-ling-zhi-xing-lou-dong-cve-2023-6895
https://avd.aliyun.com/detail?id=AVD-2023-6895
https://blog.csdn.net/qq_36618918/article/details/135107451
https://cve.imfht.com/poc_detail/73371f937d22c531aa2cb1a1a01b1d593eb6214e
https://www.nsfocus.net/vulndb/92109
https://advisories.checkpoint.com/defense/advisories/public/2024/cpai-2023-1637.html/
https://github.com/projectdiscovery/nuclei-templates/issues/9168