Description
海康威视综合安防平台，是以安全防范业务应用为导向，以视频图像应用为基础手段，综合视频监控、联网报警、智能分析、运维管理等多种安全防范应用系统，构建的多业务应用综合管理平台。海康威视综合安防平台存在文件上传漏洞
海康威视-综合安防管理平台 /center/api/files 任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/zan8in/pocwiki/blob/main/HiKVISION_%E7%BB%BC%E5%90%88%E5%AE%89%E9%98%B2%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0_%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
https://stack.chaitin.com/vuldb/detail/2156b364-f35b-42ae-8035-3909d19e8f15
https://zhuanlan.zhihu.com/p/639514473
https://blog.csdn.net/y995zq/article/details/134513324
https://adm8n.github.io/%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0/%E6%B5%B7%E5%BA%B7%E5%A8%81%E8%A7%86isecure%20center%20%E7%BB%BC%E5%90%88%E5%AE%89%E9%98%B2%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0%E5%AD%98%E5%9C%A8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E/
https://www.hikvision.com/cn/support/CybersecurityCenter/SecurityNotices/2023-03/
https://peiqi.wgpsec.org/wiki/iot/HIKVISION/HiKVISION%20%E7%BB%BC%E5%90%88%E5%AE%89%E9%98%B2%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0%20files%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.html
https://it.shanghaitech.edu.cn/2024/0124/c8406a1087957/page.htm
https://net.xju.edu.cn/info/1158/1512.htm
https://feedly.com/cve/cwe/24
https://xxb.gdufe.edu.cn/2024/0920/c4972a197757/page.htm