ID

VAR-201804-1732

TITLE

Multiple Vulnerabilities in TVT DVR/NVR/IPC

DESCRIPTION

Shenzhen Tongwei Digital Technology Co., Ltd. (TVT) is a world-class product and system solution provider for video security in R&D, production, sales and service. It provides users in more than 120 countries and regions around the world. Core competing video security products and solutions. 1) TVTDVR/NVR/IPC has hard-coded Web management interface credentials, remote command execution on Web management interface, Base64-based authentication stack overflow, hard-coded telnet credentials, TCP/4567 port information leakage and remote command execution vulnerability. An attacker can exploit the vulnerability to obtain hard-coded passwords; insert arbitrary commands into the POST XML data and execute them, combined with hard-coded Web management interface credentials vulnerabilities, can be executed without restrictions on remote commands; based on hard-coded credentials, can be downloaded from TCP/4567 port The configuration file of the remote system, which contains the name and password of the civilized name. By sending a specially crafted base64 encoded XML packet (containing a 32-byte binary header) to the TCP/4567 port, an unauthenticated remote command execution vulnerability can result.

IOT TAXONOMY

AFFECTED PRODUCTS

CVSS

PATCH

EXTERNAL IDS

REFERENCES

SOURCES

LAST UPDATE DATE

2022-05-04T08:38:03.623000+00:00

SOURCES UPDATE DATE

SOURCES RELEASE DATE